@deepraxis/sdk 0.1.0-dev.722c0d4 → 0.1.0-dev.95813a3

package/dist/generated/types.gen.d.ts

@@ -4505,7 +4505,7 @@ export type AgentManaged167 = {
      */
     id: string;
     /**
-     * Always `agent_with_overrides`. An agent reference with inline overrides; inline overrides are not supported on this platform and return 400.
+     * Always `agent_with_overrides`. An agent reference with inline overrides. For session creation, system is the only supported override: omit it to inherit the agent system prompt, pass a string of at most 100,000 characters to replace it, or null to clear it. model, tools, mcp_servers and skills overrides return 400, even when null; any other field beyond type, id, version and system also returns 400. Deployment overrides follow the deployment operation description.
      */
     type: 'agent_with_overrides';
     /**
@@ -5368,7 +5368,7 @@ export type AgentManaged170 = {
      */
     system: null | string;
     /**
-     * Tools of the agent: one agent_toolset_20260401 entry for the native tools (all resolved settings are returned, ready to send back on update), plus mcp_toolset entries; custom tool definitions are rejected with 400. Keep bash enabled to use codemode, skill and subagents.
+     * Tools of the agent: one agent_toolset_20260401 entry for the native tools (all resolved settings are returned, ready to send back on update), plus mcp_toolset entries and custom tool definitions. Custom calls emit agent.custom_tool_use and wait for user.custom_tool_result. Keep bash enabled to use codemode, skill and subagents.
      */
     tools: Array<AgentManaged44 | AgentManaged54 | AgentManaged57>;
     /**
@@ -5433,7 +5433,7 @@ export type AgentManaged74 = {
      */
     content: Array<AgentManaged75>;
     /**
-     * System message appended to the session's context. Not supported yet; sending one returns 400.
+     * System message appended to the session's context. Supported with a nonempty array of text blocks. At most one is allowed per request, as the final event immediately after user.message or user.custom_tool_result; user.tool_result remains unsupported, and initial_events does not accept system.message.
      */
     type: 'system.message';
 };
@@ -5480,7 +5480,7 @@ export type AgentManaged252 = {
      */
     custom_tool_use_id: string;
     /**
-     * Result of a custom tool call. Custom tools are not offered on this platform and this event returns 400.
+     * Result of a custom tool call. Set custom_tool_use_id to the agent.custom_tool_use event id and send only text content blocks; omitted content becomes an empty array.
      */
     type: 'user.custom_tool_result';
     /**
@@ -5513,25 +5513,33 @@ export type AgentManaged253 = {
      */
     is_error?: null | false | true;
 };
-export type AgentManaged185 = {
-    /**
-     * Unique identifier for this event.
-     */
-    id: string;
-    /**
-     * Array of content blocks comprising the user message.
-     */
-    content: Array<AgentManaged60 | AgentManaged61 | AgentManaged65 | AgentManaged70>;
+export type AgentSseEvent = ({
     /**
-     * Always `user.message`. A message from the user to the agent, with content blocks.
+     * Always `system.message`. SSE event name of this frame; its data is a system.message payload. A message produced by the platform rather than the user or the agent.
      */
-    type: 'user.message';
+    event?: 'system.message';
     /**
-     * A timestamp in RFC 3339 format
+     * Decoded JSON payload of this frame; its shape is selected by the event name.
      */
-    processed_at?: null | string;
-};
-export type AgentSseEvent = ({
+    data?: {
+        /**
+         * Unique identifier for this event.
+         */
+        id: string;
+        /**
+         * System content blocks. Text-only.
+         */
+        content: Array<AgentManaged75>;
+        /**
+         * Always `system.message`. A message produced by the platform rather than the user or the agent.
+         */
+        type: 'system.message';
+        /**
+         * A timestamp in RFC 3339 format
+         */
+        processed_at?: null | string;
+    };
+} | {
     /**
      * Always `user.message`. SSE event name of this frame; its data is a user.message payload. A message from the user to the agent, with content blocks.
      */
@@ -5556,6 +5564,24 @@ export type AgentSseEvent = ({
          * A timestamp in RFC 3339 format
          */
         processed_at?: null | string;
+        /**
+         * Untrusted page context for this user message only. Resend on each turn when needed; never added to system instructions. The complete JSON value must be at most 4096 UTF-8 bytes; invalid values return 400 INVALID_PARAMS. Empty items are treated as absent. Available only on /agent/v1.
+         */
+        praxis_context?: {
+            /**
+             * Named page values supplied by the client for this turn.
+             */
+            items: Array<{
+                /**
+                 * Page context key, such as lesson or section.
+                 */
+                name: string;
+                /**
+                 * Untrusted page value; escaped before inclusion in the user message.
+                 */
+                value: string;
+            }>;
+        };
         /**
          * UI transcript message ID. Use the last assistant message in a successfully completed turn as the fork target.
          */
@@ -6352,6 +6378,86 @@ export type AgentSseEvent = ({
             };
         };
     };
+} | {
+    /**
+     * Always `agent.custom_tool_use`. SSE event name of this frame; its data is a agent.custom_tool_use payload. The agent called a custom tool defined by the client.
+     */
+    event?: 'agent.custom_tool_use';
+    /**
+     * Decoded JSON payload of this frame; its shape is selected by the event name.
+     */
+    data?: {
+        /**
+         * Unique identifier for this event.
+         */
+        id: string;
+        /**
+         * Input parameters for the tool call.
+         */
+        input: AgentManaged193;
+        /**
+         * Name of the custom tool being called.
+         */
+        name: string;
+        /**
+         * A timestamp in RFC 3339 format
+         */
+        processed_at: string;
+        /**
+         * Always `agent.custom_tool_use`. The agent called a custom tool defined by the client.
+         */
+        type: 'agent.custom_tool_use';
+        /**
+         * When set, this event was cross-posted from a subagent's thread to surface its
+         * custom tool use on the primary thread's stream. Empty on the thread's own
+         * events. Informational only: the server routes the matching
+         * `user.custom_tool_result` by `custom_tool_use_id`, so clients do not send it
+         * back.
+         */
+        session_thread_id?: null | string;
+    };
+} | {
+    /**
+     * Always `user.custom_tool_result`. SSE event name of this frame; its data is a user.custom_tool_result payload. The user's result for a custom tool call.
+     */
+    event?: 'user.custom_tool_result';
+    /**
+     * Decoded JSON payload of this frame; its shape is selected by the event name.
+     */
+    data?: {
+        /**
+         * Unique identifier for this event.
+         */
+        id: string;
+        /**
+         * The id of the `agent.custom_tool_use` event this result corresponds to, which
+         * can be found in the last `session.status_idle`
+         * [event's](https://platform.claude.com/docs/en/api/beta/sessions/events/list#beta_managed_agents_session_requires_action.event_ids)
+         * `stop_reason.event_ids` field.
+         */
+        custom_tool_use_id: string;
+        /**
+         * Always `user.custom_tool_result`. The user's result for a custom tool call.
+         */
+        type: 'user.custom_tool_result';
+        /**
+         * The result content returned by the tool.
+         */
+        content?: Array<AgentManaged60 | AgentManaged61 | AgentManaged65 | AgentManaged189>;
+        /**
+         * Whether the tool execution resulted in an error.
+         */
+        is_error?: null | false | true;
+        /**
+         * A timestamp in RFC 3339 format
+         */
+        processed_at?: null | string;
+        /**
+         * Set by the server to the subagent thread this result was routed to. Omitted when
+         * it was routed to the primary thread.
+         */
+        session_thread_id?: null | string;
+    };
 } | {
     /**
      * Always `session.thread_created`. SSE event name of this frame; its data is a session.thread_created payload. A child thread was started.
@@ -7026,7 +7132,7 @@ export type AgentSseEvent = ({
     /**
      * Server-Sent Events event name of this frame.
      */
-    event: 'user.message' | 'user.interrupt' | 'agent.message' | 'agent.thinking' | 'session.status_running' | 'session.status_rescheduled' | 'session.status_idle' | 'session.status_terminated' | 'agent.thread_context_compacted' | 'agent.thread_context_reset' | 'session.updated' | 'session.error' | 'session.usage' | 'span.model_request_start' | 'span.model_request_end' | 'agent.tool_use' | 'agent.tool_result' | 'agent.mcp_tool_use' | 'agent.mcp_tool_result' | 'user.tool_confirmation' | 'session.thread_created' | 'session.thread_status_running' | 'session.thread_status_idle' | 'session.thread_status_rescheduled' | 'session.thread_status_terminated' | 'agent.thread_message_sent' | 'agent.thread_message_received' | 'user.withdraw' | 'user.steer' | 'system.notification' | 'session.forked' | 'session.goal_changed' | 'session.goal_verification' | 'event_start' | 'event_delta' | 'ping' | 'error';
+    event: 'system.message' | 'user.message' | 'user.interrupt' | 'agent.message' | 'agent.thinking' | 'session.status_running' | 'session.status_rescheduled' | 'session.status_idle' | 'session.status_terminated' | 'agent.thread_context_compacted' | 'agent.thread_context_reset' | 'session.updated' | 'session.error' | 'session.usage' | 'span.model_request_start' | 'span.model_request_end' | 'agent.tool_use' | 'agent.tool_result' | 'agent.mcp_tool_use' | 'agent.mcp_tool_result' | 'user.tool_confirmation' | 'agent.custom_tool_use' | 'user.custom_tool_result' | 'session.thread_created' | 'session.thread_status_running' | 'session.thread_status_idle' | 'session.thread_status_rescheduled' | 'session.thread_status_terminated' | 'agent.thread_message_sent' | 'agent.thread_message_received' | 'user.withdraw' | 'user.steer' | 'system.notification' | 'session.forked' | 'session.goal_changed' | 'session.goal_verification' | 'event_start' | 'event_delta' | 'ping' | 'error';
     data: AgentSseData;
 };
 export type AgentManaged256 = {
@@ -17448,7 +17554,7 @@ export type AgentManaged172 = {
      */
     system: null | string;
     /**
-     * Tools of the agent: one agent_toolset_20260401 entry for the native tools (all resolved settings are returned, ready to send back on update), plus mcp_toolset entries; custom tool definitions are rejected with 400. Keep bash enabled to use codemode, skill and subagents.
+     * Tools of the agent: one agent_toolset_20260401 entry for the native tools (all resolved settings are returned, ready to send back on update), plus mcp_toolset entries and custom tool definitions. Custom calls emit agent.custom_tool_use and wait for user.custom_tool_result. Keep bash enabled to use codemode, skill and subagents.
      */
     tools: Array<AgentManaged44 | AgentManaged54 | AgentManaged57>;
     /**
@@ -17705,7 +17811,7 @@ export type AgentManaged191 = {
      */
     text: string;
     /**
-     * Text block inside a tool result. Tool results are not accepted as events on this platform; sending one returns 400.
+     * Text block inside a tool result. user.custom_tool_result accepts text blocks only; user.tool_result remains unsupported.
      */
     type: 'text';
 };
@@ -17918,7 +18024,7 @@ export type AgentManaged75 = {
      */
     text: string;
     /**
-     * Text block of a system message. Not supported yet, see the system message.
+     * Supported text block of a system message. Set type to text and supply a string in text; other block types are rejected.
      */
     type: 'text';
 };
@@ -17961,6 +18067,23 @@ export type AgentManaged249 = {
  * Decoded JSON payload of this frame; its shape is selected by the event name.
  */
 export type AgentSseData = {
+    /**
+     * Unique identifier for this event.
+     */
+    id: string;
+    /**
+     * System content blocks. Text-only.
+     */
+    content: Array<AgentManaged75>;
+    /**
+     * Always `system.message`. A message produced by the platform rather than the user or the agent.
+     */
+    type: 'system.message';
+    /**
+     * A timestamp in RFC 3339 format
+     */
+    processed_at?: null | string;
+} | {
     /**
      * Unique identifier for this event.
      */
@@ -17977,6 +18100,24 @@ export type AgentSseData = {
      * A timestamp in RFC 3339 format
      */
     processed_at?: null | string;
+    /**
+     * Untrusted page context for this user message only. Resend on each turn when needed; never added to system instructions. The complete JSON value must be at most 4096 UTF-8 bytes; invalid values return 400 INVALID_PARAMS. Empty items are treated as absent. Available only on /agent/v1.
+     */
+    praxis_context?: {
+        /**
+         * Named page values supplied by the client for this turn.
+         */
+        items: Array<{
+            /**
+             * Page context key, such as lesson or section.
+             */
+            name: string;
+            /**
+             * Untrusted page value; escaped before inclusion in the user message.
+             */
+            value: string;
+        }>;
+    };
     /**
      * UI transcript message ID. Use the last assistant message in a successfully completed turn as the fork target.
      */
@@ -18601,6 +18742,68 @@ export type AgentSseData = {
             notes?: string;
         };
     };
+} | {
+    /**
+     * Unique identifier for this event.
+     */
+    id: string;
+    /**
+     * Input parameters for the tool call.
+     */
+    input: AgentManaged193;
+    /**
+     * Name of the custom tool being called.
+     */
+    name: string;
+    /**
+     * A timestamp in RFC 3339 format
+     */
+    processed_at: string;
+    /**
+     * Always `agent.custom_tool_use`. The agent called a custom tool defined by the client.
+     */
+    type: 'agent.custom_tool_use';
+    /**
+     * When set, this event was cross-posted from a subagent's thread to surface its
+     * custom tool use on the primary thread's stream. Empty on the thread's own
+     * events. Informational only: the server routes the matching
+     * `user.custom_tool_result` by `custom_tool_use_id`, so clients do not send it
+     * back.
+     */
+    session_thread_id?: null | string;
+} | {
+    /**
+     * Unique identifier for this event.
+     */
+    id: string;
+    /**
+     * The id of the `agent.custom_tool_use` event this result corresponds to, which
+     * can be found in the last `session.status_idle`
+     * [event's](https://platform.claude.com/docs/en/api/beta/sessions/events/list#beta_managed_agents_session_requires_action.event_ids)
+     * `stop_reason.event_ids` field.
+     */
+    custom_tool_use_id: string;
+    /**
+     * Always `user.custom_tool_result`. The user's result for a custom tool call.
+     */
+    type: 'user.custom_tool_result';
+    /**
+     * The result content returned by the tool.
+     */
+    content?: Array<AgentManaged60 | AgentManaged61 | AgentManaged65 | AgentManaged189>;
+    /**
+     * Whether the tool execution resulted in an error.
+     */
+    is_error?: null | false | true;
+    /**
+     * A timestamp in RFC 3339 format
+     */
+    processed_at?: null | string;
+    /**
+     * Set by the server to the subagent thread this result was routed to. Omitted when
+     * it was routed to the primary thread.
+     */
+    session_thread_id?: null | string;
 } | {
     /**
      * Unique identifier for this event.
@@ -26430,32 +26633,33 @@ export type SetRunFeedbackResponses = {
     };
 };
 export type SetRunFeedbackResponse = SetRunFeedbackResponses[keyof SetRunFeedbackResponses];
-export type ListEmbedTokensData = {
+export type ListEndUsersData = {
     body?: never;
-    path?: never;
-    query?: {
-        /**
-         * Filter by service agent identifier (agent_ or agt_ prefix).
-         */
-        agent_id?: string;
+    path: {
         /**
-         * Exact host user identifier supplied at issuance.
+         * Active service agent identifier from agent creation or listing.
          */
-        external_user_id?: string;
+        agent_id: string;
+    };
+    query?: {
         /**
-         * Maximum records per page; defaults to 20.
+         * Maximum users per page; defaults to 20.
          */
         limit?: number;
         /**
-         * next_page from a previous response with the same filters.
+         * next_page from the previous response with the same agent, q and limit.
          */
         page?: string;
+        /**
+         * Case-sensitive literal prefix of external_user_id; omit or use an empty string for all users.
+         */
+        q?: string;
     };
-    url: '/agent/v1/embed_tokens';
+    url: '/agent/v1/agents/{agent_id}/end_users';
 };
-export type ListEmbedTokensErrors = {
+export type ListEndUsersErrors = {
     /**
-     * Invalid filter, limit or cursor; reuse the cursor with its original filters.
+     * Invalid identifier, prefix, limit, cursor or blocklist size; correct the reported input.
      */
     400: unknown;
     /**
@@ -26463,17 +26667,13 @@ export type ListEmbedTokensErrors = {
      */
     401: unknown;
     /**
-     * The grant is missing or belongs to another organization, or the caller is an end user.
+     * Agent or requested user is unavailable to this caller, or the caller is an end user.
      */
     404: unknown;
-    /**
-     * Upstream revocation failed; the record remains unrevoked and the request may be retried.
-     */
-    502: unknown;
 };
-export type ListEmbedTokensResponses = {
+export type ListEndUsersResponses = {
     /**
-     * Issuance records and next page cursor.
+     * Matching users and next page cursor.
      */
     200: {
         /**
@@ -26481,177 +26681,277 @@ export type ListEmbedTokensResponses = {
          */
         data: Array<{
             /**
-             * Grant identifier returned by embed token creation.
-             */
-            id: string;
-            /**
-             * Toolset type id as used in an agent's tools entry, for example agent_toolset_20260401.
-             */
-            type: 'embed_token';
-            /**
-             * Service agent identifier.
-             */
-            agent_id: string;
-            /**
-             * Pinned agent version.
-             */
-            agent_version: number;
-            /**
-             * Exact host user identifier supplied at issuance.
+             * Host application's user identifier, scoped to this organization and agent.
              */
             external_user_id: string;
             /**
-             * Issuance time in RFC 3339 format.
+             * Earliest session creation or token issuance time; null for a preemptively blocked user with no history.
              */
-            created_at: string;
+            first_seen_at: string | null;
             /**
-             * Expiration time in RFC 3339 format.
+             * Latest session update or token issuance time; null when there is no history.
              */
-            expires_at: string;
+            last_active_at: string | null;
             /**
-             * Revocation time in RFC 3339 format, or null while not revoked.
+             * Total sessions for this end user on this agent.
              */
-            revoked_at: string | null;
+            session_count: number;
             /**
-             * Host origin recorded at issuance, or null when absent.
+             * Accumulated recorded session cost in millionths of a US dollar; zero when no cost has been recorded.
              */
-            host_origin: string | null;
+            cost_micro_usd: number;
             /**
-             * User or API key that issued the token.
+             * Whether the embed policy currently prevents this user from receiving tokens and creating sessions.
              */
-            issued_by: {
-                /**
-                 * user identifies a signed-in organization member; api_key identifies the issuing API key.
-                 */
-                type: 'user' | 'api_key';
-                /**
-                 * Identifier of the object, as returned by the API; pass it in the path of follow-up calls on the same resource.
-                 */
-                id: string;
-            };
+            blocked: boolean;
         }>;
         /**
-         * Cursor for the next page using the same filters, or null when exhausted.
+         * Cursor for the same agent, q and limit; null when exhausted.
          */
         next_page: string | null;
     };
 };
-export type ListEmbedTokensResponse = ListEmbedTokensResponses[keyof ListEmbedTokensResponses];
-export type CreateEmbedTokenData = {
-    body: {
+export type ListEndUsersResponse = ListEndUsersResponses[keyof ListEndUsersResponses];
+export type DeleteEndUserData = {
+    body?: never;
+    path: {
         /**
-         * Service agent ID or identity_number from agent retrieval; it must belong to your organization and be active.
+         * Active service agent identifier from agent creation or listing.
          */
-        agent: string;
+        agent_id: string;
         /**
-         * Existing agent version to pin. Omit to pin the latest version at issuance.
+         * Host user identifier supplied at issuance or from end-user listing.
          */
-        version?: number;
+        external_user_id: string;
+    };
+    query: {
         /**
-         * Your application's stable end-user identifier, scoped to this organization and agent.
+         * Must exactly equal the external_user_id path parameter to confirm destructive deletion.
+         */
+        confirm: string;
+    };
+    url: '/agent/v1/agents/{agent_id}/end_users/{external_user_id}';
+};
+export type DeleteEndUserErrors = {
+    /**
+     * Invalid identifier, prefix, limit, cursor or blocklist size; correct the reported input.
+     */
+    400: unknown;
+    /**
+     * Authenticate with a host credential.
+     */
+    401: unknown;
+    /**
+     * Agent or requested user is unavailable to this caller, or the caller is an end user.
+     */
+    404: unknown;
+};
+export type DeleteEndUserResponses = {
+    /**
+     * Deletion accepted; poll the deletion endpoint until done or failed.
+     */
+    202: {
+        /**
+         * Deletion task identifier.
+         */
+        id: string;
+        /**
+         * Accepted for asynchronous processing; poll deletion for progress.
+         */
+        status: 'pending';
+    };
+};
+export type DeleteEndUserResponse = DeleteEndUserResponses[keyof DeleteEndUserResponses];
+export type GetEndUserData = {
+    body?: never;
+    path: {
+        /**
+         * Active service agent identifier from agent creation or listing.
+         */
+        agent_id: string;
+        /**
+         * Host user identifier supplied at issuance or from end-user listing.
          */
         external_user_id: string;
+    };
+    query?: never;
+    url: '/agent/v1/agents/{agent_id}/end_users/{external_user_id}';
+};
+export type GetEndUserErrors = {
+    /**
+     * Invalid identifier, prefix, limit, cursor or blocklist size; correct the reported input.
+     */
+    400: unknown;
+    /**
+     * Authenticate with a host credential.
+     */
+    401: unknown;
+    /**
+     * Agent or requested user is unavailable to this caller, or the caller is an end user.
+     */
+    404: unknown;
+};
+export type GetEndUserResponses = {
+    /**
+     * Current end-user view.
+     */
+    200: {
         /**
-         * Token lifetime in seconds. Defaults to the embed policy TTL and cannot exceed its maximum or 3600 seconds.
+         * Host application's user identifier, scoped to this organization and agent.
          */
-        ttl_seconds?: number;
+        external_user_id: string;
         /**
-         * Session budget in cents. Defaults to the embed policy session budget and cannot exceed its maximum.
+         * Earliest session creation or token issuance time; null for a preemptively blocked user with no history.
          */
-        budget_cents?: number;
+        first_seen_at: string | null;
         /**
-         * Optional host context as text blocks, limited to 8192 UTF-8 bytes in total.
+         * Latest session update or token issuance time; null when there is no history.
          */
-        system_message?: Array<{
+        last_active_at: string | null;
+        /**
+         * Total sessions for this end user on this agent.
+         */
+        session_count: number;
+        /**
+         * Accumulated recorded session cost in millionths of a US dollar; zero when no cost has been recorded.
+         */
+        cost_micro_usd: number;
+        /**
+         * Whether the embed policy currently prevents this user from receiving tokens and creating sessions.
+         */
+        blocked: boolean;
+        /**
+         * Up to twenty sessions, ordered by most recent update first.
+         */
+        recent_sessions: Array<{
             /**
-             * The text block kind; text is the only supported kind.
+             * Public sesn_ session identifier, usable with session retrieval.
              */
-            type: 'text';
+            id: string;
             /**
-             * Host context text. All blocks together must fit within 8192 UTF-8 bytes.
+             * Session title, or null when unset.
              */
-            text: string;
-        }>;
-        /**
-         * Optional system prompt override, accepted only when the embed policy allows agent overrides.
-         */
-        agent_override?: {
+            title: string | null;
             /**
-             * Replacement system prompt, or null to clear it for this grant.
+             * Session entry surface, or null when no surface was recorded.
              */
-            system: string | null;
-        };
+            source: string | null;
+            /**
+             * Session creation time in UTC.
+             */
+            created_at: string;
+            /**
+             * Most recent session update time in UTC.
+             */
+            updated_at: string;
+        }>;
+    };
+};
+export type GetEndUserResponse = GetEndUserResponses[keyof GetEndUserResponses];
+export type GetEndUserDeletionData = {
+    body?: never;
+    path: {
         /**
-         * Optional subset of the policy origin entries, compared exactly. Omit to snapshot every policy origin.
+         * Active service agent identifier from agent creation or listing.
          */
-        allowed_origins?: Array<string>;
+        agent_id: string;
         /**
-         * Host metadata preserved verbatim; at most 16 keys of 1–64 characters and string values of at most 512 characters. Defaults to an empty object.
+         * Host user identifier supplied at issuance or from end-user listing.
          */
-        metadata?: {
-            [key: string]: string;
-        };
+        external_user_id: string;
     };
-    path?: never;
     query?: never;
-    url: '/agent/v1/embed_tokens';
+    url: '/agent/v1/agents/{agent_id}/end_users/{external_user_id}/deletion';
 };
-export type CreateEmbedTokenErrors = {
+export type GetEndUserDeletionErrors = {
     /**
-     * Request fields exceed policy limits, the policy or its environment is unavailable, or hosted was supplied. Configure the policy or correct the reported field.
+     * Invalid identifier, prefix, limit, cursor or blocklist size; correct the reported input.
      */
     400: unknown;
     /**
-     * A valid host credential is required; authenticate with your backend API key.
+     * Authenticate with a host credential.
      */
     401: unknown;
     /**
-     * The end user is blocked by the embed policy; contact the agent owner.
-     */
-    403: unknown;
-    /**
-     * The service agent or requested version is unavailable to this caller; check the agent identifier and version.
+     * Agent or requested user is unavailable to this caller, or the caller is an end user.
      */
     404: unknown;
-    /**
-     * Token issuance is unavailable; no usable credential was returned.
-     */
-    502: unknown;
 };
-export type CreateEmbedTokenResponses = {
+export type GetEndUserDeletionResponses = {
     /**
-     * Issued end-user token and its grant identifier and expiration.
+     * Latest deletion task and snapshot counts.
      */
-    201: {
+    200: {
         /**
-         * Grant identifier with the emb_ prefix, identifying this issuance.
+         * Deletion task identifier.
          */
         id: string;
         /**
-         * Short-lived end-user credential to pass to your frontend; keep the host API key on your backend.
+         * pending: accepted; snapshotting: exporting recovery data; deleting: verified snapshot exists and erasure is running; done: erasure completed; failed: stopped safely, retry DELETE to resume the same task.
          */
-        token: string;
+        status: 'pending' | 'snapshotting' | 'deleting' | 'done' | 'failed';
         /**
-         * Token expiration as an ISO 8601 UTC timestamp, as issued by identity.
+         * Counts from the verified snapshot; empty until snapshotting completes.
          */
-        expires_at: string;
+        counts: {
+            /**
+             * Number of primary and child sessions in the snapshot.
+             */
+            sessions?: number;
+            /**
+             * Number of durable session events captured without changing the history.
+             */
+            events?: number;
+            /**
+             * Number of stored transcript messages in the snapshot.
+             */
+            messages?: number;
+            /**
+             * Number of backed-up directory, authorization, feedback and projection rows.
+             */
+            d1_rows?: number;
+            /**
+             * Number of session attachment references; their file bytes are retained.
+             */
+            attachments?: number;
+        };
+        /**
+         * Operator recovery snapshot key, retained for seven days. Attachment bytes are not copied or deleted.
+         */
+        snapshot_key?: string;
+        /**
+         * Content-free failure summary; retry the confirmed deletion to resume.
+         */
+        error?: string;
+        /**
+         * Task creation time in RFC 3339 format.
+         */
+        created_at: string;
+        /**
+         * Latest task update time in RFC 3339 format.
+         */
+        updated_at: string;
     };
 };
-export type CreateEmbedTokenResponse = CreateEmbedTokenResponses[keyof CreateEmbedTokenResponses];
-export type RevokeEmbedTokenData = {
+export type GetEndUserDeletionResponse = GetEndUserDeletionResponses[keyof GetEndUserDeletionResponses];
+export type RevokeEndUserTokensData = {
     body?: never;
     path: {
         /**
-         * Grant id returned by issuance or listing.
+         * Active service agent identifier from agent creation or listing.
          */
-        id: string;
+        agent_id: string;
+        /**
+         * Host user identifier supplied at issuance or from end-user listing.
+         */
+        external_user_id: string;
     };
     query?: never;
-    url: '/agent/v1/embed_tokens/{id}/revoke';
+    url: '/agent/v1/agents/{agent_id}/end_users/{external_user_id}/revoke_tokens';
 };
-export type RevokeEmbedTokenErrors = {
+export type RevokeEndUserTokensErrors = {
     /**
-     * Invalid filter, limit or cursor; reuse the cursor with its original filters.
+     * Invalid identifier, prefix, limit, cursor or blocklist size; correct the reported input.
      */
     400: unknown;
     /**
@@ -26659,104 +26959,607 @@ export type RevokeEmbedTokenErrors = {
      */
     401: unknown;
     /**
-     * The grant is missing or belongs to another organization, or the caller is an end user.
+     * Agent or requested user is unavailable to this caller, or the caller is an end user.
      */
     404: unknown;
     /**
-     * Upstream revocation failed; the record remains unrevoked and the request may be retried.
+     * Credential revocation failed; grant timestamps remain unchanged. A requested block remains in effect; retry to finish revocation.
      */
     502: unknown;
 };
-export type RevokeEmbedTokenResponses = {
+export type RevokeEndUserTokensResponses = {
     /**
-     * Revoked issuance record, including its original revocation time on repeated calls.
+     * Number of newly revoked grants.
      */
     200: {
         /**
-         * Grant identifier returned by embed token creation.
-         */
-        id: string;
-        /**
-         * Type tag of the object.
+         * Number of previously unrevoked grants marked revoked by this request.
          */
-        type: 'embed_token';
+        revoked: number;
+    };
+};
+export type RevokeEndUserTokensResponse = RevokeEndUserTokensResponses[keyof RevokeEndUserTokensResponses];
+export type BlockEndUserData = {
+    body?: never;
+    path: {
         /**
-         * Service agent identifier.
+         * Active service agent identifier from agent creation or listing.
          */
         agent_id: string;
         /**
-         * Pinned agent version.
+         * Host user identifier supplied at issuance or from end-user listing.
          */
-        agent_version: number;
+        external_user_id: string;
+    };
+    query?: never;
+    url: '/agent/v1/agents/{agent_id}/end_users/{external_user_id}/block';
+};
+export type BlockEndUserErrors = {
+    /**
+     * Invalid identifier, prefix, limit, cursor or blocklist size; correct the reported input.
+     */
+    400: unknown;
+    /**
+     * Authenticate with a host credential.
+     */
+    401: unknown;
+    /**
+     * Agent or requested user is unavailable to this caller, or the caller is an end user.
+     */
+    404: unknown;
+    /**
+     * Configure an embed policy before blocking or unblocking; retry if a concurrent policy update caused the conflict.
+     */
+    409: unknown;
+    /**
+     * Credential revocation failed; grant timestamps remain unchanged. A requested block remains in effect; retry to finish revocation.
+     */
+    502: unknown;
+};
+export type BlockEndUserResponses = {
+    /**
+     * Current end-user view.
+     */
+    200: {
         /**
-         * Exact host user identifier supplied at issuance.
+         * Host application's user identifier, scoped to this organization and agent.
          */
         external_user_id: string;
         /**
-         * Issuance time in RFC 3339 format.
+         * Earliest session creation or token issuance time; null for a preemptively blocked user with no history.
          */
-        created_at: string;
+        first_seen_at: string | null;
         /**
-         * Expiration time in RFC 3339 format.
+         * Latest session update or token issuance time; null when there is no history.
          */
-        expires_at: string;
+        last_active_at: string | null;
         /**
-         * Revocation time in RFC 3339 format, or null while not revoked.
+         * Total sessions for this end user on this agent.
          */
-        revoked_at: string | null;
+        session_count: number;
         /**
-         * Host origin recorded at issuance, or null when absent.
+         * Accumulated recorded session cost in millionths of a US dollar; zero when no cost has been recorded.
          */
-        host_origin: string | null;
+        cost_micro_usd: number;
         /**
-         * User or API key that issued the token.
+         * Whether the embed policy currently prevents this user from receiving tokens and creating sessions.
          */
-        issued_by: {
-            /**
-             * user identifies a signed-in organization member; api_key identifies the issuing API key.
-             */
-            type: 'user' | 'api_key';
-            /**
-             * Identifier of the object, as returned by the API; pass it in the path of follow-up calls on the same resource.
-             */
-            id: string;
-        };
+        blocked: boolean;
     };
 };
-export type RevokeEmbedTokenResponse = RevokeEmbedTokenResponses[keyof RevokeEmbedTokenResponses];
-export type ComputersListData = {
+export type BlockEndUserResponse = BlockEndUserResponses[keyof BlockEndUserResponses];
+export type UnblockEndUserData = {
     body?: never;
-    path?: never;
-    query?: {
+    path: {
         /**
-         * Maximum number of items to return in this page: a positive integer, at most 100 (default 20; for session resources default and maximum are 1000). A larger value returns 400.
+         * Active service agent identifier from agent creation or listing.
          */
-        limit?: number;
+        agent_id: string;
         /**
-         * Opaque pagination cursor: pass the next_page value of the previous response unchanged. Omit it for the first page. A cursor from a different query or a malformed one returns 400.
+         * Host user identifier supplied at issuance or from end-user listing.
          */
-        page?: string;
+        external_user_id: string;
     };
-    url: '/agent/v1/computers';
+    query?: never;
+    url: '/agent/v1/agents/{agent_id}/end_users/{external_user_id}/unblock';
 };
-export type ComputersListErrors = {
+export type UnblockEndUserErrors = {
     /**
-     * Platform error with Computer code, message and hint
+     * Invalid identifier, prefix, limit, cursor or blocklist size; correct the reported input.
      */
-    400: {
-        error: {
-            code: string;
-            message: string;
-            hint: string;
-        };
-    };
+    400: unknown;
     /**
-     * Platform error with Computer code, message and hint
+     * Authenticate with a host credential.
      */
-    401: {
-        error: {
-            code: string;
-            message: string;
+    401: unknown;
+    /**
+     * Agent or requested user is unavailable to this caller, or the caller is an end user.
+     */
+    404: unknown;
+    /**
+     * Configure an embed policy before blocking or unblocking; retry if a concurrent policy update caused the conflict.
+     */
+    409: unknown;
+};
+export type UnblockEndUserResponses = {
+    /**
+     * Current end-user view.
+     */
+    200: {
+        /**
+         * Host application's user identifier, scoped to this organization and agent.
+         */
+        external_user_id: string;
+        /**
+         * Earliest session creation or token issuance time; null for a preemptively blocked user with no history.
+         */
+        first_seen_at: string | null;
+        /**
+         * Latest session update or token issuance time; null when there is no history.
+         */
+        last_active_at: string | null;
+        /**
+         * Total sessions for this end user on this agent.
+         */
+        session_count: number;
+        /**
+         * Accumulated recorded session cost in millionths of a US dollar; zero when no cost has been recorded.
+         */
+        cost_micro_usd: number;
+        /**
+         * Whether the embed policy currently prevents this user from receiving tokens and creating sessions.
+         */
+        blocked: boolean;
+    };
+};
+export type UnblockEndUserResponse = UnblockEndUserResponses[keyof UnblockEndUserResponses];
+export type ExchangeEmbedCodeData = {
+    body: {
+        /**
+         * Single-use credential from the c fragment parameter of hosted_url returned by embed token creation. Valid for 60 seconds.
+         */
+        code: string;
+    };
+    path?: never;
+    query?: never;
+    url: '/agent/v1/embed/exchange';
+};
+export type ExchangeEmbedCodeErrors = {
+    /**
+     * Expected a JSON object containing only code. Correct the request body.
+     */
+    400: unknown;
+    /**
+     * The code is expired, already used or unknown. Return to the host website for a new link; all three cases have the same response body.
+     */
+    404: unknown;
+    /**
+     * The IP minute limit is reached. Wait for Retry-After before trying a fresh link.
+     */
+    429: unknown;
+    /**
+     * Exchange or rate limiting is unavailable. Return to the host website for a new link later.
+     */
+    503: unknown;
+};
+export type ExchangeEmbedCodeResponses = {
+    /**
+     * The end-user token and its expiration; the code has been consumed.
+     */
+    200: {
+        /**
+         * End-user credential for the hosted conversation. Keep it in memory; it cannot be refreshed here.
+         */
+        token: string;
+        /**
+         * Token expiration as an ISO 8601 UTC timestamp. Return to the host website after expiration.
+         */
+        expires_at: string;
+    };
+};
+export type ExchangeEmbedCodeResponse = ExchangeEmbedCodeResponses[keyof ExchangeEmbedCodeResponses];
+export type CreateAnonymousEmbedTokenData = {
+    body: {
+        /**
+         * Public key created by the service agent owner; safe to include in browser code.
+         */
+        publishable_key: string;
+        /**
+         * Secret returned by a previous anonymous issuance for this key. Omit for a new visitor; an unknown secret creates a new visitor.
+         */
+        visitor_secret?: string;
+    };
+    headers: {
+        /**
+         * Browser page origin from the agent policy allowlist.
+         */
+        Origin: string;
+    };
+    path?: never;
+    query?: never;
+    url: '/agent/v1/embed_tokens/anonymous';
+};
+export type CreateAnonymousEmbedTokenErrors = {
+    /**
+     * Unknown or invalid request fields, or key budget exceeds policy. Correct the request or ask the owner to update the key.
+     */
+    400: unknown;
+    /**
+     * Unknown or disabled publishable key. Ask the agent owner for an active key.
+     */
+    401: unknown;
+    /**
+     * EMBED_BUDGET_EXHAUSTED. The daily spending cap is reached; wait for the UTC reset or ask the owner to raise it.
+     */
+    402: unknown;
+    /**
+     * EMBED_ORIGIN_NOT_ALLOWED or EMBED_USER_BLOCKED. Use an allowed page origin or contact the owner.
+     */
+    403: unknown;
+    /**
+     * EMBED_RATE_LIMITED. Wait for the IP minute window or UTC daily session cap reset.
+     */
+    429: unknown;
+    /**
+     * Anonymous issuance or rate limiting is unavailable; retry later.
+     */
+    503: unknown;
+};
+export type CreateAnonymousEmbedTokenResponses = {
+    /**
+     * End-user token and expiration, with a visitor secret only for a new visitor.
+     */
+    200: {
+        /**
+         * Short-lived end-user bearer credential for this agent's embedded sessions.
+         */
+        token: string;
+        /**
+         * RFC 3339 expiration; refresh before this time using the same visitor_secret.
+         */
+        expires_at: string;
+        /**
+         * Newly generated visitor secret; save it locally and include it on later requests. Absent when the supplied secret was recognized.
+         */
+        visitor_secret?: string;
+    };
+};
+export type CreateAnonymousEmbedTokenResponse = CreateAnonymousEmbedTokenResponses[keyof CreateAnonymousEmbedTokenResponses];
+export type ListEmbedTokensData = {
+    body?: never;
+    path?: never;
+    query?: {
+        /**
+         * Filter by service agent identifier (agent_ or agt_ prefix).
+         */
+        agent_id?: string;
+        /**
+         * Exact host user identifier supplied at issuance.
+         */
+        external_user_id?: string;
+        /**
+         * Maximum records per page; defaults to 20.
+         */
+        limit?: number;
+        /**
+         * next_page from a previous response with the same filters.
+         */
+        page?: string;
+    };
+    url: '/agent/v1/embed_tokens';
+};
+export type ListEmbedTokensErrors = {
+    /**
+     * Invalid filter, limit or cursor; reuse the cursor with its original filters.
+     */
+    400: unknown;
+    /**
+     * Authenticate with a host credential.
+     */
+    401: unknown;
+    /**
+     * The grant is missing or belongs to another organization, or the caller is an end user.
+     */
+    404: unknown;
+    /**
+     * Upstream revocation failed; the record remains unrevoked and the request may be retried.
+     */
+    502: unknown;
+};
+export type ListEmbedTokensResponses = {
+    /**
+     * Issuance records and next page cursor.
+     */
+    200: {
+        /**
+         * Items of this page, in the order requested by the call.
+         */
+        data: Array<{
+            /**
+             * Grant identifier returned by embed token creation.
+             */
+            id: string;
+            /**
+             * Toolset type id as used in an agent's tools entry, for example agent_toolset_20260401.
+             */
+            type: 'embed_token';
+            /**
+             * Service agent identifier.
+             */
+            agent_id: string;
+            /**
+             * Pinned agent version.
+             */
+            agent_version: number;
+            /**
+             * Exact host user identifier supplied at issuance.
+             */
+            external_user_id: string;
+            /**
+             * Issuance time in RFC 3339 format.
+             */
+            created_at: string;
+            /**
+             * Expiration time in RFC 3339 format.
+             */
+            expires_at: string;
+            /**
+             * Revocation time in RFC 3339 format, or null while not revoked.
+             */
+            revoked_at: string | null;
+            /**
+             * Host origin recorded at issuance, or null when absent.
+             */
+            host_origin: string | null;
+            /**
+             * User or API key that issued the token.
+             */
+            issued_by: {
+                /**
+                 * user identifies a signed-in organization member; api_key identifies the issuing API key.
+                 */
+                type: 'user' | 'api_key';
+                /**
+                 * Identifier of the object, as returned by the API; pass it in the path of follow-up calls on the same resource.
+                 */
+                id: string;
+            };
+        }>;
+        /**
+         * Cursor for the next page using the same filters, or null when exhausted.
+         */
+        next_page: string | null;
+    };
+};
+export type ListEmbedTokensResponse = ListEmbedTokensResponses[keyof ListEmbedTokensResponses];
+export type CreateEmbedTokenData = {
+    body: {
+        /**
+         * Set true to also return a hosted chat URL with a single-use credential valid for 60 seconds. Defaults to false; the agent must have an identity_number.
+         */
+        hosted?: boolean;
+        /**
+         * Service agent ID or identity_number from agent retrieval; it must belong to your organization and be active.
+         */
+        agent: string;
+        /**
+         * Existing agent version to pin. Omit to pin the latest version at issuance.
+         */
+        version?: number;
+        /**
+         * Your application's stable end-user identifier, scoped to this organization and agent.
+         */
+        external_user_id: string;
+        /**
+         * Token lifetime in seconds. Defaults to the embed policy TTL and cannot exceed its maximum or 3600 seconds.
+         */
+        ttl_seconds?: number;
+        /**
+         * Session budget in cents. Defaults to the embed policy session budget and cannot exceed its maximum.
+         */
+        budget_cents?: number;
+        /**
+         * Optional host context as text blocks, limited to 8192 UTF-8 bytes in total.
+         */
+        system_message?: Array<{
+            /**
+             * The text block kind; text is the only supported kind.
+             */
+            type: 'text';
+            /**
+             * Host context text. All blocks together must fit within 8192 UTF-8 bytes.
+             */
+            text: string;
+        }>;
+        /**
+         * Optional system prompt override, accepted only when the embed policy allows agent overrides.
+         */
+        agent_override?: {
+            /**
+             * Replacement system prompt, or null to clear it for this grant.
+             */
+            system: string | null;
+        };
+        /**
+         * Optional subset of the policy origin entries, compared exactly. Omit to snapshot every policy origin.
+         */
+        allowed_origins?: Array<string>;
+        /**
+         * Host metadata preserved verbatim; at most 16 keys of 1–64 characters and string values of at most 512 characters. Defaults to an empty object.
+         */
+        metadata?: {
+            [key: string]: string;
+        };
+    };
+    path?: never;
+    query?: never;
+    url: '/agent/v1/embed_tokens';
+};
+export type CreateEmbedTokenErrors = {
+    /**
+     * Request fields exceed policy limits, the policy or its environment is unavailable, or a hosted agent has no identity_number. Configure the policy or correct the reported field.
+     */
+    400: unknown;
+    /**
+     * A valid host credential is required; authenticate with your backend API key.
+     */
+    401: unknown;
+    /**
+     * The end user is blocked by the embed policy; contact the agent owner.
+     */
+    403: unknown;
+    /**
+     * The service agent or requested version is unavailable to this caller; check the agent identifier and version.
+     */
+    404: unknown;
+    /**
+     * Token issuance is unavailable; no usable credential was returned.
+     */
+    502: unknown;
+};
+export type CreateEmbedTokenResponses = {
+    /**
+     * Issued end-user token and its grant identifier and expiration.
+     */
+    201: {
+        /**
+         * Hosted chat link, returned only when hosted is true. Redirect the user here within 60 seconds; its fragment credential can be exchanged only once.
+         */
+        hosted_url?: string;
+        /**
+         * Grant identifier with the emb_ prefix, identifying this issuance.
+         */
+        id: string;
+        /**
+         * Short-lived end-user credential to pass to your frontend; keep the host API key on your backend.
+         */
+        token: string;
+        /**
+         * Token expiration as an ISO 8601 UTC timestamp, as issued by identity.
+         */
+        expires_at: string;
+    };
+};
+export type CreateEmbedTokenResponse = CreateEmbedTokenResponses[keyof CreateEmbedTokenResponses];
+export type RevokeEmbedTokenData = {
+    body?: never;
+    path: {
+        /**
+         * Grant id returned by issuance or listing.
+         */
+        id: string;
+    };
+    query?: never;
+    url: '/agent/v1/embed_tokens/{id}/revoke';
+};
+export type RevokeEmbedTokenErrors = {
+    /**
+     * Invalid filter, limit or cursor; reuse the cursor with its original filters.
+     */
+    400: unknown;
+    /**
+     * Authenticate with a host credential.
+     */
+    401: unknown;
+    /**
+     * The grant is missing or belongs to another organization, or the caller is an end user.
+     */
+    404: unknown;
+    /**
+     * Upstream revocation failed; the record remains unrevoked and the request may be retried.
+     */
+    502: unknown;
+};
+export type RevokeEmbedTokenResponses = {
+    /**
+     * Revoked issuance record, including its original revocation time on repeated calls.
+     */
+    200: {
+        /**
+         * Grant identifier returned by embed token creation.
+         */
+        id: string;
+        /**
+         * Type tag of the object.
+         */
+        type: 'embed_token';
+        /**
+         * Service agent identifier.
+         */
+        agent_id: string;
+        /**
+         * Pinned agent version.
+         */
+        agent_version: number;
+        /**
+         * Exact host user identifier supplied at issuance.
+         */
+        external_user_id: string;
+        /**
+         * Issuance time in RFC 3339 format.
+         */
+        created_at: string;
+        /**
+         * Expiration time in RFC 3339 format.
+         */
+        expires_at: string;
+        /**
+         * Revocation time in RFC 3339 format, or null while not revoked.
+         */
+        revoked_at: string | null;
+        /**
+         * Host origin recorded at issuance, or null when absent.
+         */
+        host_origin: string | null;
+        /**
+         * User or API key that issued the token.
+         */
+        issued_by: {
+            /**
+             * user identifies a signed-in organization member; api_key identifies the issuing API key.
+             */
+            type: 'user' | 'api_key';
+            /**
+             * Identifier of the object, as returned by the API; pass it in the path of follow-up calls on the same resource.
+             */
+            id: string;
+        };
+    };
+};
+export type RevokeEmbedTokenResponse = RevokeEmbedTokenResponses[keyof RevokeEmbedTokenResponses];
+export type ComputersListData = {
+    body?: never;
+    path?: never;
+    query?: {
+        /**
+         * Maximum number of items to return in this page: a positive integer, at most 100 (default 20; for session resources default and maximum are 1000). A larger value returns 400.
+         */
+        limit?: number;
+        /**
+         * Opaque pagination cursor: pass the next_page value of the previous response unchanged. Omit it for the first page. A cursor from a different query or a malformed one returns 400.
+         */
+        page?: string;
+    };
+    url: '/agent/v1/computers';
+};
+export type ComputersListErrors = {
+    /**
+     * Platform error with Computer code, message and hint
+     */
+    400: {
+        error: {
+            code: string;
+            message: string;
+            hint: string;
+        };
+    };
+    /**
+     * Platform error with Computer code, message and hint
+     */
+    401: {
+        error: {
+            code: string;
+            message: string;
             hint: string;
         };
     };
@@ -26857,6 +27660,10 @@ export type ComputersListResponses = {
              * Public id of the sandbox that backs the computer, usable with the sandbox API; null while none has been created.
              */
             sandbox_id: string | null;
+            /**
+             * not_started means the machine has not been created; first use provisions it. provisioned means a machine has been created, whether running or paused.
+             */
+            machine_state: 'not_started' | 'provisioned';
             /**
              * Environment recipe the computer was created with; null when none.
              */
@@ -27018,6 +27825,10 @@ export type ComputersCreateResponses = {
          * Public id of the sandbox that backs the computer, usable with the sandbox API; null while none has been created.
          */
         sandbox_id: string | null;
+        /**
+         * not_started means the machine has not been created; first use provisions it. provisioned means a machine has been created, whether running or paused.
+         */
+        machine_state: 'not_started' | 'provisioned';
         /**
          * Environment recipe the computer was created with; null when none.
          */
@@ -27286,6 +28097,10 @@ export type ComputersRetrieveResponses = {
          * Public id of the sandbox that backs the computer, usable with the sandbox API; null while none has been created.
          */
         sandbox_id: string | null;
+        /**
+         * not_started means the machine has not been created; first use provisions it. provisioned means a machine has been created, whether running or paused.
+         */
+        machine_state: 'not_started' | 'provisioned';
         /**
          * Environment recipe the computer was created with; null when none.
          */
@@ -27318,6 +28133,10 @@ export type ComputersRetrieveResponses = {
          * Number of files stored on the computer.
          */
         file_count: number;
+        /**
+         * False when disk statistics are partial because the 20-second or 50,000-entry limit was reached. Tier-local directories are excluded.
+         */
+        stats_complete: boolean;
     };
 };
 export type ComputersRetrieveResponse = ComputersRetrieveResponses[keyof ComputersRetrieveResponses];
@@ -27451,6 +28270,10 @@ export type ComputersUpdateResponses = {
          * Public id of the sandbox that backs the computer, usable with the sandbox API; null while none has been created.
          */
         sandbox_id: string | null;
+        /**
+         * not_started means the machine has not been created; first use provisions it. provisioned means a machine has been created, whether running or paused.
+         */
+        machine_state: 'not_started' | 'provisioned';
         /**
          * Environment recipe the computer was created with; null when none.
          */
@@ -27599,6 +28422,10 @@ export type ComputersArchiveResponses = {
          * Public id of the sandbox that backs the computer, usable with the sandbox API; null while none has been created.
          */
         sandbox_id: string | null;
+        /**
+         * not_started means the machine has not been created; first use provisions it. provisioned means a machine has been created, whether running or paused.
+         */
+        machine_state: 'not_started' | 'provisioned';
         /**
          * Environment recipe the computer was created with; null when none.
          */
@@ -28193,9 +29020,269 @@ export type ConnectComputerResponses = {
          * Sandbox template the computer's sandbox was created from.
          */
         template_id: string;
+        /**
+         * Machine the connection reached: light (the always-present file machine) or heavy (the full machine started on demand and kept while leases are held).
+         */
+        tier: 'light' | 'heavy';
+        /**
+         * Id of the lease that keeps this connection's machine in service; renew it while the connection is open and release it on close. Null when no lease exists.
+         */
+        lease_id: string | null;
+        /**
+         * Time the lease lapses unless renewed, as an ISO 8601 timestamp; renew at about a third of the time remaining.
+         */
+        lease_expires_at: string | null;
     };
 };
 export type ConnectComputerResponse = ConnectComputerResponses[keyof ConnectComputerResponses];
+export type RenewComputerLeaseData = {
+    body?: never;
+    path: {
+        /**
+         * Computer id (cmp_...), as returned by computers.create or computers.list.
+         */
+        computer_id: string;
+        /**
+         * lease_id from the connect response.
+         */
+        lease_id: string;
+    };
+    query?: never;
+    url: '/agent/v1/computers/{computer_id}/leases/{lease_id}/renew';
+};
+export type RenewComputerLeaseErrors = {
+    /**
+     * Platform error with Computer code, message and hint
+     */
+    400: {
+        error: {
+            code: string;
+            message: string;
+            hint: string;
+        };
+    };
+    /**
+     * Platform error with Computer code, message and hint
+     */
+    401: {
+        error: {
+            code: string;
+            message: string;
+            hint: string;
+        };
+    };
+    /**
+     * Platform error with Computer code, message and hint
+     */
+    403: {
+        error: {
+            code: string;
+            message: string;
+            hint: string;
+        };
+    };
+    /**
+     * Computer or path not found; foreign computers are indistinguishable from absent computers.
+     */
+    404: {
+        error: {
+            code: string;
+            message: string;
+            hint: string;
+        };
+    };
+    /**
+     * Platform error with Computer code, message and hint
+     */
+    409: {
+        error: {
+            code: string;
+            message: string;
+            hint: string;
+        };
+    };
+    /**
+     * Platform error with Computer code, message and hint
+     */
+    413: {
+        error: {
+            code: string;
+            message: string;
+            hint: string;
+        };
+    };
+    /**
+     * Platform error with Computer code, message and hint
+     */
+    429: {
+        error: {
+            code: string;
+            message: string;
+            hint: string;
+        };
+    };
+    /**
+     * Platform error with Computer code, message and hint
+     */
+    500: {
+        error: {
+            code: string;
+            message: string;
+            hint: string;
+        };
+    };
+    /**
+     * Platform error with Computer code, message and hint
+     */
+    503: {
+        error: {
+            code: string;
+            message: string;
+            hint: string;
+        };
+    };
+};
+export type RenewComputerLeaseError = RenewComputerLeaseErrors[keyof RenewComputerLeaseErrors];
+export type RenewComputerLeaseResponses = {
+    /**
+     * Computer result
+     */
+    200: {
+        /**
+         * Id of the lease that keeps this connection's machine in service; renew it while the connection is open and release it on close. Null when no lease exists.
+         */
+        lease_id: string;
+        /**
+         * Time the lease lapses unless renewed, as an ISO 8601 timestamp; renew at about a third of the time remaining.
+         */
+        lease_expires_at: string;
+    };
+};
+export type RenewComputerLeaseResponse = RenewComputerLeaseResponses[keyof RenewComputerLeaseResponses];
+export type ReleaseComputerLeaseData = {
+    body?: never;
+    path: {
+        /**
+         * Computer id (cmp_...), as returned by computers.create or computers.list.
+         */
+        computer_id: string;
+        /**
+         * lease_id from the connect response.
+         */
+        lease_id: string;
+    };
+    query?: never;
+    url: '/agent/v1/computers/{computer_id}/leases/{lease_id}';
+};
+export type ReleaseComputerLeaseErrors = {
+    /**
+     * Platform error with Computer code, message and hint
+     */
+    400: {
+        error: {
+            code: string;
+            message: string;
+            hint: string;
+        };
+    };
+    /**
+     * Platform error with Computer code, message and hint
+     */
+    401: {
+        error: {
+            code: string;
+            message: string;
+            hint: string;
+        };
+    };
+    /**
+     * Platform error with Computer code, message and hint
+     */
+    403: {
+        error: {
+            code: string;
+            message: string;
+            hint: string;
+        };
+    };
+    /**
+     * Computer or path not found; foreign computers are indistinguishable from absent computers.
+     */
+    404: {
+        error: {
+            code: string;
+            message: string;
+            hint: string;
+        };
+    };
+    /**
+     * Platform error with Computer code, message and hint
+     */
+    409: {
+        error: {
+            code: string;
+            message: string;
+            hint: string;
+        };
+    };
+    /**
+     * Platform error with Computer code, message and hint
+     */
+    413: {
+        error: {
+            code: string;
+            message: string;
+            hint: string;
+        };
+    };
+    /**
+     * Platform error with Computer code, message and hint
+     */
+    429: {
+        error: {
+            code: string;
+            message: string;
+            hint: string;
+        };
+    };
+    /**
+     * Platform error with Computer code, message and hint
+     */
+    500: {
+        error: {
+            code: string;
+            message: string;
+            hint: string;
+        };
+    };
+    /**
+     * Platform error with Computer code, message and hint
+     */
+    503: {
+        error: {
+            code: string;
+            message: string;
+            hint: string;
+        };
+    };
+};
+export type ReleaseComputerLeaseError = ReleaseComputerLeaseErrors[keyof ReleaseComputerLeaseErrors];
+export type ReleaseComputerLeaseResponses = {
+    /**
+     * Computer result
+     */
+    200: {
+        /**
+         * Id of the released lease.
+         */
+        id: string;
+        /**
+         * Object type tag.
+         */
+        type: 'computer_lease_released';
+    };
+};
+export type ReleaseComputerLeaseResponse = ReleaseComputerLeaseResponses[keyof ReleaseComputerLeaseResponses];
 export type ListToolsetsData = {
     body?: never;
     path?: never;
@@ -28588,11 +29675,11 @@ export type ForkSessionResponses = {
              */
             description: null | string;
             /**
-             * URL MCP servers the agent can call, paired one-to-one with mcp_toolset entries in tools and saved with the agent version. No credentials are stored here.
+             * Praxis extension: Streamable HTTP, SSE or trusted stdio MCP servers, persisted with the agent version. Optional fields remain omitted when not supplied.
              */
             mcp_servers: Array<{
                 /**
-                 * Always `url`. An MCP server reached over a URL.
+                 * Streamable HTTP transport.
                  */
                 type: 'url';
                 /**
@@ -28600,9 +29687,69 @@ export type ForkSessionResponses = {
                  */
                 name: string;
                 /**
-                 * http(s) endpoint of the MCP server, at most 2048 characters.
+                 * HTTP or HTTPS MCP server endpoint.
                  */
                 url: string;
+                /**
+                 * Praxis extension: request headers. Platform identity headers take precedence, case-insensitively.
+                 */
+                headers?: {
+                    [key: string]: string;
+                };
+                /**
+                 * Praxis extension: timeout in milliseconds. Applied to stdio; HTTP/SSE currently use the connection SDK default.
+                 */
+                timeout_ms?: number;
+            } | {
+                /**
+                 * Legacy SSE transport.
+                 */
+                type: 'sse';
+                /**
+                 * Name of the MCP server; the mcp_toolset entry that refers to it uses the same name in mcp_server_name.
+                 */
+                name: string;
+                /**
+                 * HTTP or HTTPS MCP server endpoint.
+                 */
+                url: string;
+                /**
+                 * Praxis extension: request headers. Platform identity headers take precedence, case-insensitively.
+                 */
+                headers?: {
+                    [key: string]: string;
+                };
+                /**
+                 * Praxis extension: timeout in milliseconds. Applied to stdio; HTTP/SSE currently use the connection SDK default.
+                 */
+                timeout_ms?: number;
+            } | {
+                /**
+                 * Run a command on the agent computer.
+                 */
+                type: 'stdio';
+                /**
+                 * Name of the MCP server; the mcp_toolset entry that refers to it uses the same name in mcp_server_name.
+                 */
+                name: string;
+                /**
+                 * Executable command on the agent computer.
+                 */
+                command: string;
+                /**
+                 * Command arguments; omitted means no arguments.
+                 */
+                args?: Array<string>;
+                /**
+                 * Praxis extension: environment variables for the command on the agent computer.
+                 */
+                env?: {
+                    [key: string]: string;
+                };
+                /**
+                 * Praxis extension: timeout in milliseconds. Applied to stdio; HTTP/SSE currently use the connection SDK default.
+                 */
+                timeout_ms?: number;
             }>;
             /**
              * Model identifier and configuration.
@@ -28693,11 +29840,11 @@ export type ForkSessionResponses = {
                      */
                     description: null | string;
                     /**
-                     * URL MCP servers the agent can call, paired one-to-one with mcp_toolset entries in tools and saved with the agent version. No credentials are stored here.
+                     * Praxis extension: Streamable HTTP, SSE or trusted stdio MCP servers, persisted with the agent version. Optional fields remain omitted when not supplied.
                      */
                     mcp_servers: Array<{
                         /**
-                         * Always `url`. An MCP server reached over a URL.
+                         * Streamable HTTP transport.
                          */
                         type: 'url';
                         /**
@@ -28705,9 +29852,69 @@ export type ForkSessionResponses = {
                          */
                         name: string;
                         /**
-                         * http(s) endpoint of the MCP server, at most 2048 characters.
+                         * HTTP or HTTPS MCP server endpoint.
                          */
                         url: string;
+                        /**
+                         * Praxis extension: request headers. Platform identity headers take precedence, case-insensitively.
+                         */
+                        headers?: {
+                            [key: string]: string;
+                        };
+                        /**
+                         * Praxis extension: timeout in milliseconds. Applied to stdio; HTTP/SSE currently use the connection SDK default.
+                         */
+                        timeout_ms?: number;
+                    } | {
+                        /**
+                         * Legacy SSE transport.
+                         */
+                        type: 'sse';
+                        /**
+                         * Name of the MCP server; the mcp_toolset entry that refers to it uses the same name in mcp_server_name.
+                         */
+                        name: string;
+                        /**
+                         * HTTP or HTTPS MCP server endpoint.
+                         */
+                        url: string;
+                        /**
+                         * Praxis extension: request headers. Platform identity headers take precedence, case-insensitively.
+                         */
+                        headers?: {
+                            [key: string]: string;
+                        };
+                        /**
+                         * Praxis extension: timeout in milliseconds. Applied to stdio; HTTP/SSE currently use the connection SDK default.
+                         */
+                        timeout_ms?: number;
+                    } | {
+                        /**
+                         * Run a command on the agent computer.
+                         */
+                        type: 'stdio';
+                        /**
+                         * Name of the MCP server; the mcp_toolset entry that refers to it uses the same name in mcp_server_name.
+                         */
+                        name: string;
+                        /**
+                         * Executable command on the agent computer.
+                         */
+                        command: string;
+                        /**
+                         * Command arguments; omitted means no arguments.
+                         */
+                        args?: Array<string>;
+                        /**
+                         * Praxis extension: environment variables for the command on the agent computer.
+                         */
+                        env?: {
+                            [key: string]: string;
+                        };
+                        /**
+                         * Praxis extension: timeout in milliseconds. Applied to stdio; HTTP/SSE currently use the connection SDK default.
+                         */
+                        timeout_ms?: number;
                     }>;
                     /**
                      * Model identifier and configuration.
@@ -28801,7 +30008,7 @@ export type ForkSessionResponses = {
                      */
                     system: null | string;
                     /**
-                     * Tools of the agent: one agent_toolset_20260401 entry for the native tools (all resolved settings are returned, ready to send back on update), plus mcp_toolset entries; custom tool definitions are rejected with 400. Keep bash enabled to use codemode, skill and subagents.
+                     * Tools of the agent: one agent_toolset_20260401 entry for the native tools (all resolved settings are returned, ready to send back on update), plus mcp_toolset entries and custom tool definitions. Custom calls emit agent.custom_tool_use and wait for user.custom_tool_result. Keep bash enabled to use codemode, skill and subagents.
                      */
                     tools: Array<{
                         /**
@@ -29295,7 +30502,7 @@ export type ForkSessionResponses = {
              */
             system: null | string;
             /**
-             * Tools of the agent: one agent_toolset_20260401 entry for the native tools (all resolved settings are returned, ready to send back on update), plus mcp_toolset entries; custom tool definitions are rejected with 400. Keep bash enabled to use codemode, skill and subagents.
+             * Tools of the agent: one agent_toolset_20260401 entry for the native tools (all resolved settings are returned, ready to send back on update), plus mcp_toolset entries and custom tool definitions. Custom calls emit agent.custom_tool_use and wait for user.custom_tool_result. Keep bash enabled to use codemode, skill and subagents.
              */
             tools: Array<{
                 /**
@@ -30108,6 +31315,14 @@ export type ForkSessionResponses = {
              */
             message_id: string;
         } | null;
+        /**
+         * End-user identifier associated with the session, or null when none is recorded. Own-face extension; use external_user_id on sessions.list to find this user's sessions.
+         */
+        readonly external_user_id: string | null;
+        /**
+         * Origin of the session: kit, iframe, hosted, api or automation; null when unavailable. Own-face extension; use source on sessions.list to filter by origin.
+         */
+        readonly source: 'kit' | 'iframe' | 'hosted' | 'api' | 'automation' | null;
     };
 };
 export type ForkSessionResponse = ForkSessionResponses[keyof ForkSessionResponses];
@@ -30592,6 +31807,188 @@ export type ListSessionCompactionsResponses = {
     };
 };
 export type ListSessionCompactionsResponse = ListSessionCompactionsResponses[keyof ListSessionCompactionsResponses];
+export type GetEmbedAppearanceData = {
+    body?: never;
+    headers?: {
+        /**
+         * Active public key from the agent's console embed settings; alternative to an end-user Bearer token.
+         */
+        'Praxis-Publishable-Key'?: string;
+    };
+    path?: never;
+    query?: never;
+    url: '/agent/v1/embed/appearance';
+};
+export type GetEmbedAppearanceErrors = {
+    /**
+     * Addressing parameters are not accepted; remove identity_number, agent_id and other query parameters.
+     */
+    400: unknown;
+    /**
+     * Supply a valid embed token or an active publishable key; organization member credentials cannot read this surface.
+     */
+    401: unknown;
+    /**
+     * The credential's service agent is absent or archived; obtain credentials for an active service agent.
+     */
+    404: unknown;
+    /**
+     * Appearance is temporarily unavailable; use default appearance and continue the conversation.
+     */
+    503: unknown;
+};
+export type GetEmbedAppearanceResponses = {
+    /**
+     * Saved Kit options, at most 8192 UTF-8 JSON bytes. Omitted groups use Kit defaults; an unconfigured agent returns an empty object.
+     */
+    200: {
+        /**
+         * Public identity displayed on the chat page, independent of the internal agent name.
+         */
+        agent?: {
+            /**
+             * Display name; omission keeps the neutral browser-language default.
+             */
+            name?: string;
+            /**
+             * Optional HTTPS avatar image URL; non-HTTPS images are rejected.
+             */
+            avatar?: string;
+        };
+        /**
+         * Loader default: inline stays in the page, sidebar attaches to the edge, popup floats above its launcher, modal centers an overlay. A script data-layout overrides it; Hosted always uses inline.
+         */
+        layout?: 'inline' | 'sidebar' | 'popup' | 'modal';
+        /**
+         * Default entry button for the loader; an explicit script data-launcher takes precedence.
+         */
+        launcher?: {
+            /**
+             * Entry control: none hides the launcher, bubble shows a button, mascot shows the image.
+             */
+            type: 'none' | 'bubble' | 'mascot';
+            /**
+             * Optional HTTPS mascot image URL.
+             */
+            image?: string;
+            /**
+             * Launcher corner: bottom-right is the default; bottom-left uses the opposite corner.
+             */
+            position?: 'bottom-right' | 'bottom-left';
+            /**
+             * Accessible entry button label and bubble text; omission uses the default chat label.
+             */
+            label?: string;
+        };
+        /**
+         * Visible chat heading; omitted title uses the public agent name.
+         */
+        header?: {
+            /**
+             * Optional heading text shown instead of the public agent name.
+             */
+            title?: string;
+            /**
+             * Optional secondary line beneath the heading.
+             */
+            subtitle?: string;
+            /**
+             * Optional HTTPS image shown in the heading avatar position.
+             */
+            icon?: string;
+        };
+        /**
+         * Visual tokens applied to the conversation and header; omitted fields use Kit defaults.
+         */
+        theme?: {
+            /**
+             * light or dark selects a fixed scheme; system follows the device preference.
+             */
+            colorScheme?: 'light' | 'dark' | 'system';
+            /**
+             * Explicit opaque CSS accent color, for example #167A43.
+             */
+            accent?: string;
+            /**
+             * Explicit opaque CSS background color, for example #ffffff.
+             */
+            surface?: string;
+            /**
+             * neutral uses grayscale surfaces, warm uses warm tones, cool uses cool tones.
+             */
+            grayscale?: 'neutral' | 'warm' | 'cool';
+            /**
+             * Corner rounding: none is square, sm is small, md is medium, lg is large, full is fully rounded.
+             */
+            radius?: 'none' | 'sm' | 'md' | 'lg' | 'full';
+            /**
+             * Spacing: compact reduces gaps, normal uses defaults, spacious increases gaps.
+             */
+            density?: 'compact' | 'normal' | 'spacious';
+            /**
+             * CSS font family list using fonts available on the device; external font loading is not configured here.
+             */
+            fontFamily?: string;
+            /**
+             * Positive base font size in CSS pixels; omission preserves Kit sizing.
+             */
+            fontSize?: number;
+        };
+        /**
+         * Reserved Kit locale preference: zh for Chinese, en for English. Kit currently passes this option through without translating all controls.
+         */
+        locale?: 'zh' | 'en';
+        /**
+         * Content displayed before the first message in a conversation.
+         */
+        startScreen?: {
+            /**
+             * Optional welcome text on the empty conversation.
+             */
+            greeting?: string;
+            /**
+             * Up to four suggested questions; clicking a label sends its prompt text.
+             */
+            prompts?: Array<{
+                /**
+                 * Visible suggested-question button text.
+                 */
+                label: string;
+                /**
+                 * User message sent when this suggestion is selected.
+                 */
+                prompt: string;
+            }>;
+        };
+        /**
+         * Message input appearance; transport and attachment settings are excluded.
+         */
+        composer?: {
+            /**
+             * Hint shown when the message input is empty.
+             */
+            placeholder?: string;
+        };
+        /**
+         * Optional notice displayed beside the conversation composer.
+         */
+        disclaimer?: string;
+        /**
+         * Optional text below the conversation.
+         */
+        footer?: string;
+        /**
+         * Availability of the conversation history control.
+         */
+        history?: {
+            /**
+             * False hides history; omission uses the default enabled state.
+             */
+            enabled?: boolean;
+        };
+    };
+};
+export type GetEmbedAppearanceResponse = GetEmbedAppearanceResponses[keyof GetEmbedAppearanceResponses];
 export type CreateAudioSpeechData = {
     body: unknown & {
         /**
@@ -35969,6 +37366,175 @@ export type CountResponseInputTokensResponses = {
     };
 };
 export type CountResponseInputTokensResponse = CountResponseInputTokensResponses[keyof CountResponseInputTokensResponses];
+export type ListOrganizationFeedbackData = {
+    body?: never;
+    path?: never;
+    query?: {
+        /**
+         * Only feedback in these phases: a comma-separated list of open, awaiting_customer, in_progress, resolved or closed, for example open,in_progress; see the phase field of a feedback for what each means.
+         */
+        phase?: string;
+        /**
+         * Case-insensitive text matched against titles and message bodies.
+         */
+        query?: string;
+        /**
+         * Items per page, 1 to 100.
+         */
+        limit?: number;
+        /**
+         * Opaque cursor from next_page of the previous response.
+         */
+        page?: string;
+    };
+    url: '/organization/v1/feedback';
+};
+export type ListOrganizationFeedbackErrors = {
+    /**
+     * INVALID_PARAMS; correct the fields identified by violations.
+     */
+    400: unknown;
+    /**
+     * Missing or invalid credential; authenticate with a valid API key, Console session, or machine token.
+     */
+    401: unknown;
+};
+export type ListOrganizationFeedbackResponses = {
+    /**
+     * One page of feedback.
+     */
+    200: {
+        /**
+         * Object type tag, always page.
+         */
+        object: 'page';
+        /**
+         * The feedback on this page.
+         */
+        data: Array<{
+            /**
+             * Object type tag, always feedback.
+             */
+            object: 'feedback';
+            /**
+             * Feedback identifier, prefixed with fb_.
+             */
+            id: string;
+            /**
+             * Short summary of the request, if one was given.
+             */
+            title?: string | null;
+            /**
+             * Feedback type key, if one was given.
+             */
+            type?: string | null;
+            /**
+             * The first message the requester wrote.
+             */
+            message: string;
+            /**
+             * Where the request stands: open means submitted and not yet picked up; awaiting_customer means support is waiting for your reply; in_progress means support is working on it; resolved means it was answered and marked solved; closed means it was closed without further action.
+             */
+            phase: 'open' | 'awaiting_customer' | 'in_progress' | 'resolved' | 'closed';
+            /**
+             * Coarser state derived from phase: unresolved means still open or in progress; resolved means resolved or closed; ignored means support set it aside.
+             */
+            status: 'unresolved' | 'resolved' | 'ignored';
+            /**
+             * Channel the feedback came through: console for the Console help page, api for API callers, codemode for AI callers using a machine token.
+             */
+            source: 'console' | 'api' | 'codemode';
+            /**
+             * Page or API URL the requester reported.
+             */
+            url?: string | null;
+            /**
+             * When the first support reply is due, counted in business hours.
+             */
+            first_response_due_time?: string | null;
+            /**
+             * When support first replied, if it has.
+             */
+            first_response_time?: string | null;
+            /**
+             * Time of the latest message visible to the requester.
+             */
+            last_message_time: string;
+            /**
+             * True while the requester has not read the latest support reply.
+             */
+            unread: boolean;
+            /**
+             * When the feedback was submitted.
+             */
+            create_time: string;
+            /**
+             * When the feedback last changed.
+             */
+            update_time: string;
+            /**
+             * How the feedback was submitted; only the kind is shown, never who.
+             */
+            reporter?: {
+                /**
+                 * user means a signed-in person, api_key means an API key, agent_session means an AI agent session.
+                 */
+                type?: 'user' | 'api_key' | 'agent_session';
+            };
+            /**
+             * The latest message you can see, for list rows; phase-change events do not count.
+             */
+            last_message_preview?: {
+                /**
+                 * customer means your organization wrote it; staff means the support team; system means the automatic acknowledgement.
+                 */
+                author_kind?: 'customer' | 'staff' | 'system';
+                /**
+                 * Plain text of the message, at most 120 characters.
+                 */
+                body?: string;
+                /**
+                 * When the message was written.
+                 */
+                create_time?: string;
+            } | null;
+            /**
+             * Files attached to this item; metadata only, bytes are never inlined.
+             */
+            attachments: Array<{
+                /**
+                 * Attachment identifier, prefixed with fba_.
+                 */
+                id?: string;
+                /**
+                 * Original filename of the attachment.
+                 */
+                name?: string;
+                /**
+                 * MIME type of the attachment content.
+                 */
+                content_type?: string;
+                /**
+                 * Size of the attachment in bytes.
+                 */
+                size?: number;
+                /**
+                 * When the attachment was stored.
+                 */
+                create_time?: string;
+            }>;
+        }>;
+        /**
+         * True when another page follows.
+         */
+        has_more: boolean;
+        /**
+         * Opaque cursor for the next page; null on the last page.
+         */
+        next_page: string | null;
+    };
+};
+export type ListOrganizationFeedbackResponse = ListOrganizationFeedbackResponses[keyof ListOrganizationFeedbackResponses];
 export type CreateOrganizationFeedbackData = {
     body: {
         /**
@@ -35991,6 +37557,14 @@ export type CreateOrganizationFeedbackData = {
          * X-Request-Id from the failed response or the related error event ID.
          */
         associated_event_id?: string;
+        /**
+         * Short summary shown in the feedback list; at most 200 Unicode code points.
+         */
+        title?: string;
+        /**
+         * Feedback type key enabled in the help settings, such as issue, suggestion, billing or other. Unknown or disabled keys are rejected with INVALID_PARAMS.
+         */
+        type?: string;
         /**
          * Optional string labels for grouping the reported problem.
          */
@@ -36065,6 +37639,458 @@ export type CreateOrganizationFeedbackResponses = {
     };
 };
 export type CreateOrganizationFeedbackResponse = CreateOrganizationFeedbackResponses[keyof CreateOrganizationFeedbackResponses];
+export type GetOrganizationFeedbackCountsData = {
+    body?: never;
+    path?: never;
+    query?: never;
+    url: '/organization/v1/feedback/counts';
+};
+export type GetOrganizationFeedbackCountsErrors = {
+    /**
+     * Missing or invalid credential; authenticate with a valid API key, Console session, or machine token.
+     */
+    401: unknown;
+};
+export type GetOrganizationFeedbackCountsResponses = {
+    /**
+     * Counts per phase.
+     */
+    200: {
+        /**
+         * Object type tag, always feedback.counts.
+         */
+        object: 'feedback.counts';
+        /**
+         * Feedback in phase open: submitted and not yet picked up.
+         */
+        open: number;
+        /**
+         * Feedback in phase awaiting_customer: support is waiting for your reply.
+         */
+        awaiting_customer: number;
+        /**
+         * Feedback in phase in_progress: support is working on it.
+         */
+        in_progress: number;
+        /**
+         * Feedback in phase resolved: answered and marked solved.
+         */
+        resolved: number;
+        /**
+         * Feedback in phase closed: closed without further action.
+         */
+        closed: number;
+        /**
+         * All feedback of your organization.
+         */
+        total: number;
+    };
+};
+export type GetOrganizationFeedbackCountsResponse = GetOrganizationFeedbackCountsResponses[keyof GetOrganizationFeedbackCountsResponses];
+export type GetOrganizationFeedbackData = {
+    body?: never;
+    path: {
+        /**
+         * Feedback identifier, prefixed with fb_.
+         */
+        id: string;
+    };
+    query?: never;
+    url: '/organization/v1/feedback/{id}';
+};
+export type GetOrganizationFeedbackErrors = {
+    /**
+     * Missing or invalid credential; authenticate with a valid API key, Console session, or machine token.
+     */
+    401: unknown;
+    /**
+     * FEEDBACK_NOT_FOUND; the id does not exist in your organization.
+     */
+    404: unknown;
+};
+export type GetOrganizationFeedbackResponses = {
+    /**
+     * The feedback.
+     */
+    200: {
+        /**
+         * Object type tag, always feedback.
+         */
+        object: 'feedback';
+        /**
+         * Feedback identifier, prefixed with fb_.
+         */
+        id: string;
+        /**
+         * Short summary of the request, if one was given.
+         */
+        title?: string | null;
+        /**
+         * Feedback type key, if one was given.
+         */
+        type?: string | null;
+        /**
+         * The first message the requester wrote.
+         */
+        message: string;
+        /**
+         * Where the request stands: open means submitted and not yet picked up; awaiting_customer means support is waiting for your reply; in_progress means support is working on it; resolved means it was answered and marked solved; closed means it was closed without further action.
+         */
+        phase: 'open' | 'awaiting_customer' | 'in_progress' | 'resolved' | 'closed';
+        /**
+         * Coarser state derived from phase: unresolved means still open or in progress; resolved means resolved or closed; ignored means support set it aside.
+         */
+        status: 'unresolved' | 'resolved' | 'ignored';
+        /**
+         * Channel the feedback came through: console for the Console help page, api for API callers, codemode for AI callers using a machine token.
+         */
+        source: 'console' | 'api' | 'codemode';
+        /**
+         * Page or API URL the requester reported.
+         */
+        url?: string | null;
+        /**
+         * When the first support reply is due, counted in business hours.
+         */
+        first_response_due_time?: string | null;
+        /**
+         * When support first replied, if it has.
+         */
+        first_response_time?: string | null;
+        /**
+         * Time of the latest message visible to the requester.
+         */
+        last_message_time: string;
+        /**
+         * True while the requester has not read the latest support reply.
+         */
+        unread: boolean;
+        /**
+         * When the feedback was submitted.
+         */
+        create_time: string;
+        /**
+         * When the feedback last changed.
+         */
+        update_time: string;
+        /**
+         * How the feedback was submitted; only the kind is shown, never who.
+         */
+        reporter?: {
+            /**
+             * user means a signed-in person, api_key means an API key, agent_session means an AI agent session.
+             */
+            type?: 'user' | 'api_key' | 'agent_session';
+        };
+        /**
+         * The latest message you can see, for list rows; phase-change events do not count.
+         */
+        last_message_preview?: {
+            /**
+             * customer means your organization wrote it; staff means the support team; system means the automatic acknowledgement.
+             */
+            author_kind?: 'customer' | 'staff' | 'system';
+            /**
+             * Plain text of the message, at most 120 characters.
+             */
+            body?: string;
+            /**
+             * When the message was written.
+             */
+            create_time?: string;
+        } | null;
+        /**
+         * Files attached to this item; metadata only, bytes are never inlined.
+         */
+        attachments: Array<{
+            /**
+             * Attachment identifier, prefixed with fba_.
+             */
+            id?: string;
+            /**
+             * Original filename of the attachment.
+             */
+            name?: string;
+            /**
+             * MIME type of the attachment content.
+             */
+            content_type?: string;
+            /**
+             * Size of the attachment in bytes.
+             */
+            size?: number;
+            /**
+             * When the attachment was stored.
+             */
+            create_time?: string;
+        }>;
+    };
+};
+export type GetOrganizationFeedbackResponse = GetOrganizationFeedbackResponses[keyof GetOrganizationFeedbackResponses];
+export type ListOrganizationFeedbackMessagesData = {
+    body?: never;
+    path: {
+        /**
+         * Feedback identifier, prefixed with fb_.
+         */
+        id: string;
+    };
+    query?: {
+        /**
+         * Items per page, 1 to 100.
+         */
+        limit?: number;
+        /**
+         * Opaque cursor from next_page of the previous response.
+         */
+        page?: string;
+    };
+    url: '/organization/v1/feedback/{id}/messages';
+};
+export type ListOrganizationFeedbackMessagesErrors = {
+    /**
+     * Missing or invalid credential; authenticate with a valid API key, Console session, or machine token.
+     */
+    401: unknown;
+    /**
+     * FEEDBACK_NOT_FOUND.
+     */
+    404: unknown;
+};
+export type ListOrganizationFeedbackMessagesResponses = {
+    /**
+     * One page of messages.
+     */
+    200: {
+        /**
+         * Object type tag, always page.
+         */
+        object: 'page';
+        /**
+         * The messages on this page.
+         */
+        data: Array<{
+            /**
+             * Object type tag, always feedback.message.
+             */
+            object: 'feedback.message';
+            /**
+             * Message identifier, prefixed with fbm_.
+             */
+            id: string;
+            /**
+             * Identifier of the feedback this message belongs to.
+             */
+            feedback_id: string;
+            /**
+             * Who wrote the message.
+             */
+            author: {
+                /**
+                 * customer means your organization wrote it; staff means the support team wrote it; system means a recorded event or the automatic acknowledgement.
+                 */
+                kind?: 'customer' | 'staff' | 'system';
+                /**
+                 * Display name of the support team member; present only when kind is staff.
+                 */
+                name?: string;
+            };
+            /**
+             * Markdown text of the message.
+             */
+            body: string;
+            /**
+             * Present on system messages that record a change.
+             */
+            event?: {
+                /**
+                 * Kind of change recorded: phase_changed means the phase moved from one value to another; assigned means the handling owner changed.
+                 */
+                type?: 'phase_changed' | 'assigned';
+                /**
+                 * Value before the change.
+                 */
+                from?: string | null;
+                /**
+                 * Value after the change.
+                 */
+                to?: string | null;
+            } | null;
+            /**
+             * Files attached to this item; metadata only, bytes are never inlined.
+             */
+            attachments: Array<{
+                /**
+                 * Attachment identifier, prefixed with fba_.
+                 */
+                id?: string;
+                /**
+                 * Original filename of the attachment.
+                 */
+                name?: string;
+                /**
+                 * MIME type of the attachment content.
+                 */
+                content_type?: string;
+                /**
+                 * Size of the attachment in bytes.
+                 */
+                size?: number;
+                /**
+                 * When the attachment was stored.
+                 */
+                create_time?: string;
+            }>;
+            /**
+             * When the message was written.
+             */
+            create_time: string;
+        }>;
+        /**
+         * True when another page follows.
+         */
+        has_more: boolean;
+        /**
+         * Opaque cursor for the next page; null on the last page.
+         */
+        next_page: string | null;
+    };
+};
+export type ListOrganizationFeedbackMessagesResponse = ListOrganizationFeedbackMessagesResponses[keyof ListOrganizationFeedbackMessagesResponses];
+export type CreateOrganizationFeedbackMessageData = {
+    body: {
+        /**
+         * Markdown text; at most 4096 Unicode code points.
+         */
+        body: string;
+        /**
+         * Up to five attachments; decoded bytes must not exceed 10 MiB each or 20 MiB in total.
+         */
+        attachments?: Array<{
+            /**
+             * Attachment filename shown with the message.
+             */
+            name: string;
+            /**
+             * MIME type of the attachment content.
+             */
+            content_type: string;
+            /**
+             * Base64-encoded file bytes with standard padding; limits apply to decoded bytes.
+             */
+            data_base64: string;
+        }>;
+    };
+    path: {
+        /**
+         * Feedback identifier, prefixed with fb_.
+         */
+        id: string;
+    };
+    query?: never;
+    url: '/organization/v1/feedback/{id}/messages';
+};
+export type CreateOrganizationFeedbackMessageErrors = {
+    /**
+     * INVALID_PARAMS; correct the fields identified by violations.
+     */
+    400: unknown;
+    /**
+     * Missing or invalid credential; authenticate with a valid API key, Console session, or machine token.
+     */
+    401: unknown;
+    /**
+     * FEEDBACK_NOT_FOUND.
+     */
+    404: unknown;
+    /**
+     * ATTACHMENT_TOO_LARGE; reduce decoded attachments to at most 10 MiB each and 20 MiB total.
+     */
+    413: unknown;
+};
+export type CreateOrganizationFeedbackMessageResponses = {
+    /**
+     * The stored message.
+     */
+    201: {
+        /**
+         * Object type tag, always feedback.message.
+         */
+        object: 'feedback.message';
+        /**
+         * Message identifier, prefixed with fbm_.
+         */
+        id: string;
+        /**
+         * Identifier of the feedback this message belongs to.
+         */
+        feedback_id: string;
+        /**
+         * Who wrote the message.
+         */
+        author: {
+            /**
+             * customer means your organization wrote it; staff means the support team wrote it; system means a recorded event or the automatic acknowledgement.
+             */
+            kind?: 'customer' | 'staff' | 'system';
+            /**
+             * Display name of the support team member; present only when kind is staff.
+             */
+            name?: string;
+        };
+        /**
+         * Markdown text of the message.
+         */
+        body: string;
+        /**
+         * Present on system messages that record a change.
+         */
+        event?: {
+            /**
+             * Kind of change recorded: phase_changed means the phase moved from one value to another; assigned means the handling owner changed.
+             */
+            type?: 'phase_changed' | 'assigned';
+            /**
+             * Value before the change.
+             */
+            from?: string | null;
+            /**
+             * Value after the change.
+             */
+            to?: string | null;
+        } | null;
+        /**
+         * Files attached to this item; metadata only, bytes are never inlined.
+         */
+        attachments: Array<{
+            /**
+             * Attachment identifier, prefixed with fba_.
+             */
+            id?: string;
+            /**
+             * Original filename of the attachment.
+             */
+            name?: string;
+            /**
+             * MIME type of the attachment content.
+             */
+            content_type?: string;
+            /**
+             * Size of the attachment in bytes.
+             */
+            size?: number;
+            /**
+             * When the attachment was stored.
+             */
+            create_time?: string;
+        }>;
+        /**
+         * When the message was written.
+         */
+        create_time: string;
+    };
+};
+export type CreateOrganizationFeedbackMessageResponse = CreateOrganizationFeedbackMessageResponses[keyof CreateOrganizationFeedbackMessageResponses];
 export type ListOrganizationCostsData = {
     body?: never;
     path?: never;
@@ -37519,7 +39545,7 @@ export type AgentsListResponses = {
              */
             system: null | string;
             /**
-             * Tools of the agent: one agent_toolset_20260401 entry for the native tools (all resolved settings are returned, ready to send back on update), plus mcp_toolset entries; custom tool definitions are rejected with 400. Keep bash enabled to use codemode, skill and subagents.
+             * Tools of the agent: one agent_toolset_20260401 entry for the native tools (all resolved settings are returned, ready to send back on update), plus mcp_toolset entries and custom tool definitions. Custom calls emit agent.custom_tool_use and wait for user.custom_tool_result. Keep bash enabled to use codemode, skill and subagents.
              */
             tools: Array<AgentManaged44 | AgentManaged54 | AgentManaged57>;
             /**
@@ -38428,7 +40454,7 @@ export type AgentsCreateResponses = {
          */
         system: null | string;
         /**
-         * Tools of the agent: one agent_toolset_20260401 entry for the native tools (all resolved settings are returned, ready to send back on update), plus mcp_toolset entries; custom tool definitions are rejected with 400. Keep bash enabled to use codemode, skill and subagents.
+         * Tools of the agent: one agent_toolset_20260401 entry for the native tools (all resolved settings are returned, ready to send back on update), plus mcp_toolset entries and custom tool definitions. Custom calls emit agent.custom_tool_use and wait for user.custom_tool_result. Keep bash enabled to use codemode, skill and subagents.
          */
         tools: Array<AgentManaged44 | AgentManaged54 | AgentManaged57>;
         /**
@@ -38904,7 +40930,7 @@ export type AgentsRetrieveResponses = {
          */
         system: null | string;
         /**
-         * Tools of the agent: one agent_toolset_20260401 entry for the native tools (all resolved settings are returned, ready to send back on update), plus mcp_toolset entries; custom tool definitions are rejected with 400. Keep bash enabled to use codemode, skill and subagents.
+         * Tools of the agent: one agent_toolset_20260401 entry for the native tools (all resolved settings are returned, ready to send back on update), plus mcp_toolset entries and custom tool definitions. Custom calls emit agent.custom_tool_use and wait for user.custom_tool_result. Keep bash enabled to use codemode, skill and subagents.
          */
         tools: Array<AgentManaged44 | AgentManaged54 | AgentManaged57>;
         /**
@@ -39823,7 +41849,7 @@ export type AgentsUpdateResponses = {
          */
         system: null | string;
         /**
-         * Tools of the agent: one agent_toolset_20260401 entry for the native tools (all resolved settings are returned, ready to send back on update), plus mcp_toolset entries; custom tool definitions are rejected with 400. Keep bash enabled to use codemode, skill and subagents.
+         * Tools of the agent: one agent_toolset_20260401 entry for the native tools (all resolved settings are returned, ready to send back on update), plus mcp_toolset entries and custom tool definitions. Custom calls emit agent.custom_tool_use and wait for user.custom_tool_result. Keep bash enabled to use codemode, skill and subagents.
          */
         tools: Array<AgentManaged44 | AgentManaged54 | AgentManaged57>;
         /**
@@ -40293,7 +42319,7 @@ export type AgentsArchiveResponses = {
          */
         system: null | string;
         /**
-         * Tools of the agent: one agent_toolset_20260401 entry for the native tools (all resolved settings are returned, ready to send back on update), plus mcp_toolset entries; custom tool definitions are rejected with 400. Keep bash enabled to use codemode, skill and subagents.
+         * Tools of the agent: one agent_toolset_20260401 entry for the native tools (all resolved settings are returned, ready to send back on update), plus mcp_toolset entries and custom tool definitions. Custom calls emit agent.custom_tool_use and wait for user.custom_tool_result. Keep bash enabled to use codemode, skill and subagents.
          */
         tools: Array<AgentManaged44 | AgentManaged54 | AgentManaged57>;
         /**
@@ -40773,7 +42799,7 @@ export type AgentsVersionsListResponses = {
              */
             system: null | string;
             /**
-             * Tools of the agent: one agent_toolset_20260401 entry for the native tools (all resolved settings are returned, ready to send back on update), plus mcp_toolset entries; custom tool definitions are rejected with 400. Keep bash enabled to use codemode, skill and subagents.
+             * Tools of the agent: one agent_toolset_20260401 entry for the native tools (all resolved settings are returned, ready to send back on update), plus mcp_toolset entries and custom tool definitions. Custom calls emit agent.custom_tool_use and wait for user.custom_tool_result. Keep bash enabled to use codemode, skill and subagents.
              */
             tools: Array<AgentManaged44 | AgentManaged54 | AgentManaged57>;
             /**
@@ -41214,6 +43240,14 @@ export type SessionsListData = {
          */
         limit?: number;
         page?: null | string;
+        /**
+         * Filter by an exact end-user identifier (1–128 characters: A-Z, a-z, 0-9, underscore, dot, colon, at sign or hyphen). Keep this filter unchanged when following page.
+         */
+        external_user_id?: string;
+        /**
+         * Filter by session origin: kit, iframe, hosted, api or automation. Keep this filter unchanged when following page.
+         */
+        source?: 'kit' | 'iframe' | 'hosted' | 'api' | 'automation';
     };
     url: '/agent/v1/sessions';
 };
@@ -41302,7 +43336,7 @@ export type SessionsListResponses = {
                  */
                 system: null | string;
                 /**
-                 * Tools of the agent: one agent_toolset_20260401 entry for the native tools (all resolved settings are returned, ready to send back on update), plus mcp_toolset entries; custom tool definitions are rejected with 400. Keep bash enabled to use codemode, skill and subagents.
+                 * Tools of the agent: one agent_toolset_20260401 entry for the native tools (all resolved settings are returned, ready to send back on update), plus mcp_toolset entries and custom tool definitions. Custom calls emit agent.custom_tool_use and wait for user.custom_tool_result. Keep bash enabled to use codemode, skill and subagents.
                  */
                 tools: Array<AgentManaged44 | AgentManaged54 | AgentManaged57>;
                 /**
@@ -41437,6 +43471,14 @@ export type SessionsListResponses = {
                  */
                 message_id: string;
             } | null;
+            /**
+             * End-user identifier associated with the session, or null when none is recorded. Own-face extension; use external_user_id on sessions.list to find this user's sessions.
+             */
+            readonly external_user_id: string | null;
+            /**
+             * Origin of the session: kit, iframe, hosted, api or automation; null when unavailable. Own-face extension; use source on sessions.list to filter by origin.
+             */
+            readonly source: 'kit' | 'iframe' | 'hosted' | 'api' | 'automation' | null;
         }>;
         /**
          * Opaque cursor for the next page: pass it unchanged as page to continue. Null when this is the last page.
@@ -41603,7 +43645,7 @@ export type SessionsCreateResponses = {
              */
             system: null | string;
             /**
-             * Tools of the agent: one agent_toolset_20260401 entry for the native tools (all resolved settings are returned, ready to send back on update), plus mcp_toolset entries; custom tool definitions are rejected with 400. Keep bash enabled to use codemode, skill and subagents.
+             * Tools of the agent: one agent_toolset_20260401 entry for the native tools (all resolved settings are returned, ready to send back on update), plus mcp_toolset entries and custom tool definitions. Custom calls emit agent.custom_tool_use and wait for user.custom_tool_result. Keep bash enabled to use codemode, skill and subagents.
              */
             tools: Array<AgentManaged44 | AgentManaged54 | AgentManaged57>;
             /**
@@ -41738,6 +43780,14 @@ export type SessionsCreateResponses = {
              */
             message_id: string;
         } | null;
+        /**
+         * End-user identifier associated with the session, or null when none is recorded. Own-face extension; use external_user_id on sessions.list to find this user's sessions.
+         */
+        readonly external_user_id: string | null;
+        /**
+         * Origin of the session: kit, iframe, hosted, api or automation; null when unavailable. Own-face extension; use source on sessions.list to filter by origin.
+         */
+        readonly source: 'kit' | 'iframe' | 'hosted' | 'api' | 'automation' | null;
     };
 };
 export type SessionsCreateResponse = SessionsCreateResponses[keyof SessionsCreateResponses];
@@ -41833,7 +43883,7 @@ export type SessionsRetrieveResponses = {
              */
             system: null | string;
             /**
-             * Tools of the agent: one agent_toolset_20260401 entry for the native tools (all resolved settings are returned, ready to send back on update), plus mcp_toolset entries; custom tool definitions are rejected with 400. Keep bash enabled to use codemode, skill and subagents.
+             * Tools of the agent: one agent_toolset_20260401 entry for the native tools (all resolved settings are returned, ready to send back on update), plus mcp_toolset entries and custom tool definitions. Custom calls emit agent.custom_tool_use and wait for user.custom_tool_result. Keep bash enabled to use codemode, skill and subagents.
              */
             tools: Array<AgentManaged44 | AgentManaged54 | AgentManaged57>;
             /**
@@ -41968,6 +44018,14 @@ export type SessionsRetrieveResponses = {
              */
             message_id: string;
         } | null;
+        /**
+         * End-user identifier associated with the session, or null when none is recorded. Own-face extension; use external_user_id on sessions.list to find this user's sessions.
+         */
+        readonly external_user_id: string | null;
+        /**
+         * Origin of the session: kit, iframe, hosted, api or automation; null when unavailable. Own-face extension; use source on sessions.list to filter by origin.
+         */
+        readonly source: 'kit' | 'iframe' | 'hosted' | 'api' | 'automation' | null;
     };
 };
 export type SessionsRetrieveResponse = SessionsRetrieveResponses[keyof SessionsRetrieveResponses];
@@ -42103,7 +44161,245 @@ export type SessionsUpdateResponses = {
              */
             system: null | string;
             /**
-             * Tools of the agent: one agent_toolset_20260401 entry for the native tools (all resolved settings are returned, ready to send back on update), plus mcp_toolset entries; custom tool definitions are rejected with 400. Keep bash enabled to use codemode, skill and subagents.
+             * Tools of the agent: one agent_toolset_20260401 entry for the native tools (all resolved settings are returned, ready to send back on update), plus mcp_toolset entries and custom tool definitions. Custom calls emit agent.custom_tool_use and wait for user.custom_tool_result. Keep bash enabled to use codemode, skill and subagents.
+             */
+            tools: Array<AgentManaged44 | AgentManaged54 | AgentManaged57>;
+            /**
+             * Always `agent`. An agent definition.
+             */
+            type: 'agent';
+            /**
+             * The agent's current version. Starts at 1 and increments each time the agent is modified.
+             */
+            version: number;
+        };
+        /**
+         * A timestamp in RFC 3339 format
+         */
+        archived_at: null | string;
+        /**
+         * A hard spend ceiling. The session stops issuing new model requests once the
+         * tracked list cost reaches `max_list_cost`.
+         */
+        budget: null | AgentManaged76;
+        /**
+         * A timestamp in RFC 3339 format
+         */
+        created_at: string;
+        /**
+         * Id of the environment recipe the session's sandbox was created from. Omitted when no recipe was selected, that is, for a light machine or the Computer chosen by computer_id.
+         */
+        environment_id?: string;
+        metadata: AgentManaged173;
+        /**
+         * Per-outcome evaluation state. One entry per `define_outcome` event sent to the
+         * session.
+         */
+        outcome_evaluations: Array<AgentManaged174>;
+        /**
+         * Resources attached to the session, at most 500; each is a file reference mounted into the session's machine.
+         */
+        resources: Array<AgentManaged175 | AgentManaged176 | AgentManaged177>;
+        /**
+         * Timing statistics for a session.
+         */
+        stats: AgentManaged178;
+        /**
+         * SessionStatus enum
+         *
+         * - `rescheduling` - Transient error occurred, retrying automatically.
+         * - `running` - Agent is actively executing.
+         * - `idle` - Agent is waiting for input, including user messages or tool
+         * confirmations. Sessions start in idle.
+         * - `terminated` - Session has ended, either due to an error or completion.
+         */
+        status: 'rescheduling' | 'running' | 'idle' | 'terminated';
+        /**
+         * Title of the session, set on create or through sessions.update; null when none was set.
+         */
+        title: null | string;
+        /**
+         * Always `session`. A session, one conversation of an agent on a machine.
+         */
+        type: 'session';
+        /**
+         * A timestamp in RFC 3339 format
+         */
+        updated_at: string;
+        /**
+         * Cumulative token usage for a session across all turns.
+         */
+        usage: AgentManaged179;
+        /**
+         * Vault IDs attached to the session at creation. Empty when no vaults were
+         * supplied.
+         */
+        vault_ids: Array<string>;
+        /**
+         * Deployment ID when the session was created from a deployment reference. Null
+         * otherwise.
+         */
+        deployment_id?: null | string;
+        /**
+         * Normalized session working directory; defaults to /home/user/workspace. Forks inherit this directory.
+         */
+        cwd: string;
+        /**
+         * Praxis extension: MA only has session-scoped temporary containers and memory_stores, not durable browsable computers. computer_id selects a tenant-owned active computer. Session selection overrides the agent default; a sandbox environment_id and computer_id cannot be combined. Omitted when no computer is selected.
+         */
+        computer_id?: string;
+        /**
+         * Praxis extension: the currently selected session model.
+         */
+        model?: {
+            /**
+             * Identifier of the object, as returned by the API; pass it in the path of follow-up calls on the same resource.
+             */
+            id: string;
+            /**
+             * Supported thinking controls, or null when capability is unknown or unavailable. efforts lists selectable strengths; can_disable permits none; default_effort is nullable.
+             */
+            thinking: {
+                /**
+                 * Thinking levels the model accepts as effort, in ascending order.
+                 */
+                efforts: Array<'low' | 'medium' | 'high' | 'xhigh' | 'max'>;
+                /**
+                 * Whether effort none (thinking off) is allowed for this model.
+                 */
+                can_disable: boolean;
+                /**
+                 * Thinking level used when neither the session nor the agent selects one; null when the model states no default.
+                 */
+                default_effort: 'low' | 'medium' | 'high' | 'xhigh' | 'max' | null;
+            } | null;
+        };
+        /**
+         * Praxis extension: explicit session thinking effort; null inherits the pinned agent default, then the model default. none disables thinking only when model.thinking.can_disable is true. Unsupported efforts return 400 invalid_request_error.
+         */
+        thinking?: {
+            /**
+             * Thinking level saved for this session: low, medium, high, xhigh, max, or none to turn thinking off. Null or absent means the session inherits the agent default and then the model default.
+             */
+            effort: 'low' | 'medium' | 'high' | 'xhigh' | 'max' | 'none';
+        } | null;
+        /**
+         * Praxis extension: source of a forked session; null for other sessions. Available only on /agent/v1.
+         */
+        forked_from?: {
+            /**
+             * Id of the parent session this session was forked from; it is left unchanged by the fork.
+             */
+            session_id: string;
+            /**
+             * message_id of the agent message in the parent session up to which the conversation was copied.
+             */
+            message_id: string;
+        } | null;
+        /**
+         * End-user identifier associated with the session, or null when none is recorded. Own-face extension; use external_user_id on sessions.list to find this user's sessions.
+         */
+        readonly external_user_id: string | null;
+        /**
+         * Origin of the session: kit, iframe, hosted, api or automation; null when unavailable. Own-face extension; use source on sessions.list to filter by origin.
+         */
+        readonly source: 'kit' | 'iframe' | 'hosted' | 'api' | 'automation' | null;
+    };
+};
+export type SessionsUpdateResponse = SessionsUpdateResponses[keyof SessionsUpdateResponses];
+export type SessionsArchiveData = {
+    body?: never;
+    path: {
+        /**
+         * Session id (sesn_...), as returned by sessions.create or sessions.list. The same id is also accepted as the session_id query parameter on resource and thread calls, where it must equal the path value.
+         */
+        session_id: string;
+    };
+    query?: never;
+    url: '/agent/v1/sessions/{session_id}/archive';
+};
+export type SessionsArchiveResponses = {
+    /**
+     * Successful response
+     */
+    200: {
+        /**
+         * Session id (sesn_...). Pass it as session_id in every session call.
+         */
+        id: string;
+        /**
+         * Resolved `agent` definition for a `session`. Snapshot of the `agent` at
+         * `session` creation time.
+         */
+        agent: {
+            /**
+             * Agent id (agent_...). Pass it as agent when creating a session and as agent_id in agent calls.
+             */
+            id: string;
+            /**
+             * Free-text description of what the agent is for; null when none was set.
+             */
+            description: null | string;
+            /**
+             * Praxis extension: HTTP, SSE or trusted stdio MCP servers paired with mcp_toolset entries and saved with the agent version.
+             */
+            mcp_servers: Array<AgentManaged36>;
+            /**
+             * Model identifier and configuration.
+             */
+            model: {
+                /**
+                 * The model that will power your agent.
+                 *
+                 * See [models](https://docs.anthropic.com/en/docs/models-overview) for additional
+                 * details and options.
+                 */
+                id: 'claude-opus-5-5' | 'claude-fable-5-1' | 'claude-sonnet-5' | 'claude-fable-5' | 'claude-opus-5' | 'claude-opus-4-8' | 'claude-opus-4-7' | 'claude-opus-4-6' | 'claude-sonnet-4-6' | 'claude-haiku-4-5' | 'claude-haiku-4-5-20251001' | 'claude-opus-4-5' | 'claude-opus-4-5-20251101' | 'claude-sonnet-4-5' | 'claude-sonnet-4-5-20250929' | string;
+                /**
+                 * How hard Claude works on each turn. Sets `output_config.effort` on every
+                 * Messages call the session makes.
+                 */
+                effort?: AgentManaged2 | AgentManaged3 | AgentManaged4 | AgentManaged5 | AgentManaged6;
+                /**
+                 * Geographic region for model inference. When unset, requests fall through to the
+                 * workspace's default_inference_geo.
+                 */
+                inference_geo?: string;
+                /**
+                 * Inference speed mode. `fast` provides significantly faster output token
+                 * generation at premium pricing. Not all models support `fast`; invalid
+                 * combinations are rejected at create time.
+                 */
+                speed?: 'standard' | 'fast';
+                /**
+                 * Platform model settings. Only reasoning is supported; other model controls return 400.
+                 */
+                settings?: {
+                    /**
+                     * Default thinking effort for sessions without an explicit selection. Unsupported defaults fall back to the selected model default.
+                     */
+                    reasoning?: 'low' | 'medium' | 'high' | 'xhigh' | 'max' | 'none';
+                };
+            };
+            /**
+             * Resolved coordinator topology with full agent definitions for each roster
+             * member.
+             */
+            multiagent: null | AgentManaged171;
+            /**
+             * Display name of the agent, as set on create or update. It is a label, not a unique key.
+             */
+            name: string;
+            /**
+             * Skill attachments are not supported: a nonempty skills array returns 400. Omit this field or send an empty array. The native skill tool loads available runtime skills independently of this field.
+             */
+            skills: Array<AgentManaged42 | AgentManaged43>;
+            /**
+             * System prompt given to the model at the start of every session of this agent; null when none was set.
+             */
+            system: null | string;
+            /**
+             * Tools of the agent: one agent_toolset_20260401 entry for the native tools (all resolved settings are returned, ready to send back on update), plus mcp_toolset entries and custom tool definitions. Custom calls emit agent.custom_tool_use and wait for user.custom_tool_result. Keep bash enabled to use codemode, skill and subagents.
              */
             tools: Array<AgentManaged44 | AgentManaged54 | AgentManaged57>;
             /**
@@ -42238,236 +44534,14 @@ export type SessionsUpdateResponses = {
              */
             message_id: string;
         } | null;
-    };
-};
-export type SessionsUpdateResponse = SessionsUpdateResponses[keyof SessionsUpdateResponses];
-export type SessionsArchiveData = {
-    body?: never;
-    path: {
-        /**
-         * Session id (sesn_...), as returned by sessions.create or sessions.list. The same id is also accepted as the session_id query parameter on resource and thread calls, where it must equal the path value.
-         */
-        session_id: string;
-    };
-    query?: never;
-    url: '/agent/v1/sessions/{session_id}/archive';
-};
-export type SessionsArchiveResponses = {
-    /**
-     * Successful response
-     */
-    200: {
-        /**
-         * Session id (sesn_...). Pass it as session_id in every session call.
-         */
-        id: string;
-        /**
-         * Resolved `agent` definition for a `session`. Snapshot of the `agent` at
-         * `session` creation time.
-         */
-        agent: {
-            /**
-             * Agent id (agent_...). Pass it as agent when creating a session and as agent_id in agent calls.
-             */
-            id: string;
-            /**
-             * Free-text description of what the agent is for; null when none was set.
-             */
-            description: null | string;
-            /**
-             * Praxis extension: HTTP, SSE or trusted stdio MCP servers paired with mcp_toolset entries and saved with the agent version.
-             */
-            mcp_servers: Array<AgentManaged36>;
-            /**
-             * Model identifier and configuration.
-             */
-            model: {
-                /**
-                 * The model that will power your agent.
-                 *
-                 * See [models](https://docs.anthropic.com/en/docs/models-overview) for additional
-                 * details and options.
-                 */
-                id: 'claude-opus-5-5' | 'claude-fable-5-1' | 'claude-sonnet-5' | 'claude-fable-5' | 'claude-opus-5' | 'claude-opus-4-8' | 'claude-opus-4-7' | 'claude-opus-4-6' | 'claude-sonnet-4-6' | 'claude-haiku-4-5' | 'claude-haiku-4-5-20251001' | 'claude-opus-4-5' | 'claude-opus-4-5-20251101' | 'claude-sonnet-4-5' | 'claude-sonnet-4-5-20250929' | string;
-                /**
-                 * How hard Claude works on each turn. Sets `output_config.effort` on every
-                 * Messages call the session makes.
-                 */
-                effort?: AgentManaged2 | AgentManaged3 | AgentManaged4 | AgentManaged5 | AgentManaged6;
-                /**
-                 * Geographic region for model inference. When unset, requests fall through to the
-                 * workspace's default_inference_geo.
-                 */
-                inference_geo?: string;
-                /**
-                 * Inference speed mode. `fast` provides significantly faster output token
-                 * generation at premium pricing. Not all models support `fast`; invalid
-                 * combinations are rejected at create time.
-                 */
-                speed?: 'standard' | 'fast';
-                /**
-                 * Platform model settings. Only reasoning is supported; other model controls return 400.
-                 */
-                settings?: {
-                    /**
-                     * Default thinking effort for sessions without an explicit selection. Unsupported defaults fall back to the selected model default.
-                     */
-                    reasoning?: 'low' | 'medium' | 'high' | 'xhigh' | 'max' | 'none';
-                };
-            };
-            /**
-             * Resolved coordinator topology with full agent definitions for each roster
-             * member.
-             */
-            multiagent: null | AgentManaged171;
-            /**
-             * Display name of the agent, as set on create or update. It is a label, not a unique key.
-             */
-            name: string;
-            /**
-             * Skill attachments are not supported: a nonempty skills array returns 400. Omit this field or send an empty array. The native skill tool loads available runtime skills independently of this field.
-             */
-            skills: Array<AgentManaged42 | AgentManaged43>;
-            /**
-             * System prompt given to the model at the start of every session of this agent; null when none was set.
-             */
-            system: null | string;
-            /**
-             * Tools of the agent: one agent_toolset_20260401 entry for the native tools (all resolved settings are returned, ready to send back on update), plus mcp_toolset entries; custom tool definitions are rejected with 400. Keep bash enabled to use codemode, skill and subagents.
-             */
-            tools: Array<AgentManaged44 | AgentManaged54 | AgentManaged57>;
-            /**
-             * Always `agent`. An agent definition.
-             */
-            type: 'agent';
-            /**
-             * The agent's current version. Starts at 1 and increments each time the agent is modified.
-             */
-            version: number;
-        };
-        /**
-         * A timestamp in RFC 3339 format
-         */
-        archived_at: null | string;
-        /**
-         * A hard spend ceiling. The session stops issuing new model requests once the
-         * tracked list cost reaches `max_list_cost`.
-         */
-        budget: null | AgentManaged76;
-        /**
-         * A timestamp in RFC 3339 format
-         */
-        created_at: string;
-        /**
-         * Id of the environment recipe the session's sandbox was created from. Omitted when no recipe was selected, that is, for a light machine or the Computer chosen by computer_id.
-         */
-        environment_id?: string;
-        metadata: AgentManaged173;
-        /**
-         * Per-outcome evaluation state. One entry per `define_outcome` event sent to the
-         * session.
-         */
-        outcome_evaluations: Array<AgentManaged174>;
-        /**
-         * Resources attached to the session, at most 500; each is a file reference mounted into the session's machine.
-         */
-        resources: Array<AgentManaged175 | AgentManaged176 | AgentManaged177>;
-        /**
-         * Timing statistics for a session.
-         */
-        stats: AgentManaged178;
-        /**
-         * SessionStatus enum
-         *
-         * - `rescheduling` - Transient error occurred, retrying automatically.
-         * - `running` - Agent is actively executing.
-         * - `idle` - Agent is waiting for input, including user messages or tool
-         * confirmations. Sessions start in idle.
-         * - `terminated` - Session has ended, either due to an error or completion.
-         */
-        status: 'rescheduling' | 'running' | 'idle' | 'terminated';
-        /**
-         * Title of the session, set on create or through sessions.update; null when none was set.
-         */
-        title: null | string;
         /**
-         * Always `session`. A session, one conversation of an agent on a machine.
+         * End-user identifier associated with the session, or null when none is recorded. Own-face extension; use external_user_id on sessions.list to find this user's sessions.
          */
-        type: 'session';
+        readonly external_user_id: string | null;
         /**
-         * A timestamp in RFC 3339 format
+         * Origin of the session: kit, iframe, hosted, api or automation; null when unavailable. Own-face extension; use source on sessions.list to filter by origin.
          */
-        updated_at: string;
-        /**
-         * Cumulative token usage for a session across all turns.
-         */
-        usage: AgentManaged179;
-        /**
-         * Vault IDs attached to the session at creation. Empty when no vaults were
-         * supplied.
-         */
-        vault_ids: Array<string>;
-        /**
-         * Deployment ID when the session was created from a deployment reference. Null
-         * otherwise.
-         */
-        deployment_id?: null | string;
-        /**
-         * Normalized session working directory; defaults to /home/user/workspace. Forks inherit this directory.
-         */
-        cwd: string;
-        /**
-         * Praxis extension: MA only has session-scoped temporary containers and memory_stores, not durable browsable computers. computer_id selects a tenant-owned active computer. Session selection overrides the agent default; a sandbox environment_id and computer_id cannot be combined. Omitted when no computer is selected.
-         */
-        computer_id?: string;
-        /**
-         * Praxis extension: the currently selected session model.
-         */
-        model?: {
-            /**
-             * Identifier of the object, as returned by the API; pass it in the path of follow-up calls on the same resource.
-             */
-            id: string;
-            /**
-             * Supported thinking controls, or null when capability is unknown or unavailable. efforts lists selectable strengths; can_disable permits none; default_effort is nullable.
-             */
-            thinking: {
-                /**
-                 * Thinking levels the model accepts as effort, in ascending order.
-                 */
-                efforts: Array<'low' | 'medium' | 'high' | 'xhigh' | 'max'>;
-                /**
-                 * Whether effort none (thinking off) is allowed for this model.
-                 */
-                can_disable: boolean;
-                /**
-                 * Thinking level used when neither the session nor the agent selects one; null when the model states no default.
-                 */
-                default_effort: 'low' | 'medium' | 'high' | 'xhigh' | 'max' | null;
-            } | null;
-        };
-        /**
-         * Praxis extension: explicit session thinking effort; null inherits the pinned agent default, then the model default. none disables thinking only when model.thinking.can_disable is true. Unsupported efforts return 400 invalid_request_error.
-         */
-        thinking?: {
-            /**
-             * Thinking level saved for this session: low, medium, high, xhigh, max, or none to turn thinking off. Null or absent means the session inherits the agent default and then the model default.
-             */
-            effort: 'low' | 'medium' | 'high' | 'xhigh' | 'max' | 'none';
-        } | null;
-        /**
-         * Praxis extension: source of a forked session; null for other sessions. Available only on /agent/v1.
-         */
-        forked_from?: {
-            /**
-             * Id of the parent session this session was forked from; it is left unchanged by the fork.
-             */
-            session_id: string;
-            /**
-             * message_id of the agent message in the parent session up to which the conversation was copied.
-             */
-            message_id: string;
-        } | null;
+        readonly source: 'kit' | 'iframe' | 'hosted' | 'api' | 'automation' | null;
     };
 };
 export type SessionsArchiveResponse = SessionsArchiveResponses[keyof SessionsArchiveResponses];
@@ -42544,6 +44618,24 @@ export type SessionsEventsListResponses = {
              * A timestamp in RFC 3339 format
              */
             processed_at?: null | string;
+            /**
+             * Untrusted page context for this user message only. Resend on each turn when needed; never added to system instructions. The complete JSON value must be at most 4096 UTF-8 bytes; invalid values return 400 INVALID_PARAMS. Empty items are treated as absent. Available only on /agent/v1.
+             */
+            praxis_context?: {
+                /**
+                 * Named page values supplied by the client for this turn.
+                 */
+                items: Array<{
+                    /**
+                     * Page context key, such as lesson or section.
+                     */
+                    name: string;
+                    /**
+                     * Untrusted page value; escaped before inclusion in the user message.
+                     */
+                    value: string;
+                }>;
+            };
             /**
              * UI transcript message ID. Use the last assistant message in a successfully completed turn as the fork target.
              */
@@ -43177,7 +45269,34 @@ export type SessionsEventsSendData = {
         /**
          * Events to send to the `session`.
          */
-        events: Array<AgentManaged59 | AgentManaged71 | AgentManaged74 | AgentManaged250 | AgentManaged251 | AgentManaged252 | AgentManaged253 | {
+        events: Array<{
+            /**
+             * Array of content blocks for the user message.
+             */
+            content: Array<AgentManaged60 | AgentManaged61 | AgentManaged65 | AgentManaged70>;
+            /**
+             * User message event carrying one nonempty text content block.
+             */
+            type: 'user.message';
+            /**
+             * Untrusted page context for this user message only. Resend on each turn when needed; never added to system instructions. The complete JSON value must be at most 4096 UTF-8 bytes; invalid values return 400 INVALID_PARAMS. Empty items are treated as absent. Available only on /agent/v1.
+             */
+            praxis_context?: {
+                /**
+                 * Named page values supplied by the client for this turn.
+                 */
+                items: Array<{
+                    /**
+                     * Page context key, such as lesson or section.
+                     */
+                    name: string;
+                    /**
+                     * Untrusted page value; escaped before inclusion in the user message.
+                     */
+                    value: string;
+                }>;
+            };
+        } | AgentManaged71 | AgentManaged74 | AgentManaged250 | AgentManaged251 | AgentManaged252 | AgentManaged253 | {
             /**
              * Request to inject the queued user message named by event_id into the running turn.
              */
@@ -43239,7 +45358,42 @@ export type SessionsEventsSendResponses = {
         /**
          * Sent events
          */
-        data?: Array<AgentManaged185 | AgentManaged186 | AgentManaged187 | AgentManaged188 | AgentManaged238 | AgentManaged243 | AgentManaged247 | {
+        data?: Array<{
+            /**
+             * Unique identifier for this event.
+             */
+            id: string;
+            /**
+             * Array of content blocks comprising the user message.
+             */
+            content: Array<AgentManaged60 | AgentManaged61 | AgentManaged65 | AgentManaged70>;
+            /**
+             * Always `user.message`. A message from the user to the agent, with content blocks.
+             */
+            type: 'user.message';
+            /**
+             * A timestamp in RFC 3339 format
+             */
+            processed_at?: null | string;
+            /**
+             * Untrusted page context for this user message only. Resend on each turn when needed; never added to system instructions. The complete JSON value must be at most 4096 UTF-8 bytes; invalid values return 400 INVALID_PARAMS. Empty items are treated as absent. Available only on /agent/v1.
+             */
+            praxis_context?: {
+                /**
+                 * Named page values supplied by the client for this turn.
+                 */
+                items: Array<{
+                    /**
+                     * Page context key, such as lesson or section.
+                     */
+                    name: string;
+                    /**
+                     * Untrusted page value; escaped before inclusion in the user message.
+                     */
+                    value: string;
+                }>;
+            };
+        } | AgentManaged186 | AgentManaged187 | AgentManaged188 | AgentManaged238 | AgentManaged243 | AgentManaged247 | {
             /**
              * Event id, unique within the session. Use it to refer to this event, for example in user.tool_confirmation or user.steer.
              */
@@ -43471,6 +45625,24 @@ export type SessionsThreadsEventsListResponses = {
              * A timestamp in RFC 3339 format
              */
             processed_at?: null | string;
+            /**
+             * Untrusted page context for this user message only. Resend on each turn when needed; never added to system instructions. The complete JSON value must be at most 4096 UTF-8 bytes; invalid values return 400 INVALID_PARAMS. Empty items are treated as absent. Available only on /agent/v1.
+             */
+            praxis_context?: {
+                /**
+                 * Named page values supplied by the client for this turn.
+                 */
+                items: Array<{
+                    /**
+                     * Page context key, such as lesson or section.
+                     */
+                    name: string;
+                    /**
+                     * Untrusted page value; escaped before inclusion in the user message.
+                     */
+                    value: string;
+                }>;
+            };
             /**
              * UI transcript message ID. Use the last assistant message in a successfully completed turn as the fork target.
              */